I have gone into my ATT account to change password, done a virus and malware scan....still getting these damn messages...

What am I not doing that I should be doing?  I have Yahoo, and when I tried to change password there, I was taken to ATT which I changed...is there a step I have missed ?