Strange posts, password-reset emails you didn’t request, or friends getting odd messages from you? How to take your account back and lock it down.