not sure I woke up this morning, checking my wallet and was going to let it stake for a bit and boom a keylogger just sent all my btcd to another address. Guess this will force me to learn how to use linux.
its possible that you had gotten a change address somehow. Its possible, dump all the wallet privkeys, also do dumpprivkey address_the_coins_were_sent_to in debug console.
its possible the address belongs to your own wallet.
So do that. see. Its not possible to crack wallet.dat unless your password was as simple as 1234.