It's not possible to address the experiences that other people may have had without knowing what actions they took, and what security and other programs they are using, and exactly what those programs may or may not have done. More importantly, you are assuming the attacks were identical, which may not be the case at all.
We can only discuss your situation, and I'm still not clear on the sequence of events that you describe. What program told you to log into Hotmail, and why? How did you get to the login page? Why would you even do that if you suspected the email had been malicious? Perhaps someone hacked your Hotmail account because you entered your credentials on a fake log-in page. Malware may not even be involved - what you describe could have all been accomplished through social engineering.
