Thanks John, Also there is one last phishing link on my sig.
I am working with Theymos to resolve the issue.
We seem to have found how the hacker got in the second time and Theymos is pushing in a fix now.