Been getting 3102 error for 12 hours, talked to guildmates again and my main had logged off, so I had them check my alt and sure enough he was logged in and spamming gold selling shit.

I had ALREADY changed my password, so changed it again, added one time password, changed email on account. Tried logging back in and he was still logged in. What else can I do to get him logged out so he loses access to account and I get it back? Surely he cant hack the one time password token can he?