Because you fell for a phishing scam (I presume) they know your email and password, so they're logging onto your account and sending the link to all your contacts.
Just change your password, then they can't login to your account.
And don't fall for it again
..If you downloaded something dodgy (in which case it could be a
keylogger), then you'll need to
scan your PC for viruses.