You should reset your signature. Somebody hid a script in it that keeps asking for people's passwords. You should change your password too. I'm serious.