To me it sounds like someone used a brute force program to break in.  Did you use the same PW on mtgox and the btc guild?  People should go through the code of these utilities to see if anyone snuck anything malicious in just in case.  Maybe some kind of key logger or something.