My both Wallets were offline, i didn't have any only backups.
So I was thinking that 21.02 i was installing a miner, and maybe Phoenix miner or someting different I downloaded.
I will scan my computers using SysInternal Autoruns, it have very good ability to check against VirusTotal all files that starts with system.
I think it was some single run app used to stole it.
No it is 100% no me, because I'm using Bitcoin Core and it store info about my transactions.
And yes my fail that wallet.dat wasn't protected and eth wallet also had shitty password.
So now only found that BTC gone to binance, not sure yet, but wrote mail to them.
If it is Binance then I think it is possible to identify this Robbber, but with help of police.