OK. So either they have accessed your machine physically or remotely, or they somehow have a copy of your keys and passphrase.....

There are other software wallets, but they function basically the same as multibit. Hardware wallets would be the safest, or cloud/on-line with 2 factor auth.....and very strong passwords