Make sure you change every single one of your passwords as well. If it was local malware that got your Amazon credentials, then you have to assume that it got every other ID/PW that you've typed or saved on the compromised machine. Also, I always recommend running a scan on every possible device...