well it started 23 December when i visited listentobitcoin.com @ that moment a java file got installed without interference named shezam.exe (i retreived it from the java install log) see below

%http://listentobitcoin.info/sezam.exe   188.165.49.114     HTTP/1.1 200 OK content-length 502272
last-modified Fri, 20 Dec 2013 17:50:53 GMT expires Mon, 06 Jan 2014 15:44:16 GMT content-type application/octet-stream date Mon, 23 Dec 2013 15:44:16 GMT server nginx
cache-control max-age=1209600

the file installed RAT Cybergate @ c:\directory\cybergate\googleupdate.exe a backdoor that give's complete access to the users's computer / webcam / chrome passwords / keylogger etc so he waited his turn and when i was making dinner @ about 6 o clock he started selling xpm for bitcoin and transferring my litecoin, because my gmail was open he had access to the confirmation mail as well all in about 30 minutes total losses 0.47 btc and 15 ltc luckily al mined so no real harm there but it sucks big time because i spend al day chancing passwords, and banging my head i didn't activate the 2FA on cryptsy

so everybody please learn from it