Help, Someone is Trying to Hack my Steam

DDoS him/her.

View attached image.

Didn't you simply receive the notification for your first password change? Might be a stupid question but you never know. :P
Also do you have SteamGuard activated? If not, do it. You might also want to contact Steam support so that they can check what's going on.

Contact support, get a new e-mail and don't use 1234 as your password.

You are not Alone bud...Valve try to fix it now

http://www.rockpapershotgun.com/2015/07/27/steam-account-hijack-exploit-fixed-password-recovery/

This --> https://support.steampowered.com/kb_article.php?ref=8625-WRAH-9030

Steam Guard two-factor authentication + Gmail 2-Step Verification

no chance to hack

Sounds like you have something nasty on your computer, like a key logger that AVG is not picking up, or someone has access to your email address. You should do a full system scan, change the password of your email address from another computer, or after the full system scan (if you have steam guard active, they need your email address to do any changes to your account), and then possibly even go so far as to reinstall your computer just to be on the safe side.

edit Oh, it would seem like there was some other exploit being used here.

if Your account is safeguarded by steam, then in any case for up to 7 Days. No transactions, trades or anything can happen during that period. Suggest you use a 128-Bit password (what that means is your password must be 21 Characters long consisting of Uppercase, Lowercase, Numbers mixed to ensure it won't be hacked so soon again) i preferably use 256 Bit passwords if the site allows it. most sites only allow 6 or 8 or 16 length passwords which is a joke in today's world..

Possible you have spyware, malware and other stuff on your PC sending info to the hacker has you change it. Strongly suggest you use Spybot - Search & Destroy "It safeguards your browser against such malicious activities which browser do not implement on their own."

PS: Spybot is Free, "paid version is only for Professionals and companies. The only difference with Home user is, it adds antivirus which you don't need if you already use your own antivirus. other than that. The free version provides you the benefit of full protection" Heed my advice. It's the least i can do, Otherwise i wouldn't even bother posting it to help a fellow PC user out.

The authenticator generates a code that you need to enter every time that you log on to your Steam account.

Yeah… no. If it was like the security code, that every time it's a new IP, it could actually be usable. With every logon, it's just pointless overzealous security for some of the rich kids who have nothing else to do but to collect 100-dollar weapon skins for CS:GO. Not even my company computers are this paranoid, and we deal with information.

Maybe your email was stolen, because there is no ways to change password without email confirming, except 'request new password' fiches. If it was just a request (and password was not changed) then your account is safe (but dont forget to activate Steam Guard).

Thanks for all the help guys. I will go ahead and close this now so it is not clogging the forums. I will look into all these suggestions, thank you all!