3. When I did the restore the box said the seed type was "Electrum". I did not change it.
Electrum will never show "
Electrum" after pasting an electrum seed.
It's either "
segwit", "
standard", "
2fa-segwit", "
2fa" or "
old" if BIP39 checkbox isn't ticked, otherwise, it'll be "
BIP39: (checksum: failed)".
2. -snip- Honestly, it's been so long since I was in this wallet I don't remember if I ever saw a balance of more than "0". I think, early on, a balance did show but I'm not absolutely sure. I found it easier to check the blockchain site. All the addresses begin with bc1q.
It's hard to call that it's caused by a malware/hacker since you've mentioned that the funds are still there and it's more than a year.
There's a possibility that you've been unintentionally using a different wallet file during those times.
You can try to search your drive for any "
wallets" or "
electrum_data" folder
and see if there are files inside without any extension but with the wallet name that you've used or "
default_wallet" or "
wallet_1" if you didn't named it.
Since there are only 8 transactions, the size should be only around 10KB+, and will show
base64 characters if your open it with a text editor or readable text if it's not encrypted.