Ive sent an email to exchange and they gave me IP logs and said that password has been changed and it was.
And you know from the logs who owns the recipient address?!
ehh he ruined my day... 
Of course he did. And I feel for you. Unfortunately I don't think that you'll find here anything else than advises how to avoid this in the future.
I know that you hope to recover that; don't fall for unknown people asking money in advance promising the recovery, you'll end up losing even more.