Just now one of the lose address (1CzAncjXYjtiXNC4CNAw4RoKdQLoi72xn )made 2 new transaction. this address is 1dice1e6pdhLzzWQq7yMidf6j8eAg7pkY for SatoshiDICE 0.0015% . What should i do now for next?
You haven't tried to send money from that address recently, have you?
no. i didn't do anything from this address after stolen.
Then it sounds like he actually has your keys. Which makes it even more strange that he left change in the address earlier. Laziness on his part? Is he having to manually enter transactions or something? It's all very odd.
So far the evidence indicates:
- The PRNG isn't the issue at hand.
- The thief has your keys.
- The money-snatching process isn't automated, at least not in any efficient way.
My best guess is, he has your password, and is actually logging onto blockchain.info and moving money from your address.
HOW he got your password is the tricky part that would reveal a lot. If you already know if your password was weak, that could solve that right away. If you DON'T believe you have a weak password, then likely your system is compromised. (There's a way to test that, but it would involve spending a little more BTC, which probably isn't necessary at this point.)