so it's either a malware or you reused the password at somewhere where you shouldn't. shows how important to have a good anti-virus running 24/7 and enabling 2FA in every site that offers it.
Malware can evade antivirus though.
so is there any good solution to prevent being infected by malware?