The file "servicehost.exe* seems to nest itself in the C: Drive, at least that was my finding.  I don't know if this virus is specifically engineered to hunt crypto currencies.  From what I read, this is a generic virus that can compromise pretty much anything on your computer that is vulnerable.  I didn't find it on my thumb drive, but like I stated in an earlier post, windows will write files to your hard drive even after the thumb drive is removed without your knowledge.  This is something that people should take note of as there is no pop-up notification to inform you that this is occurring.

Thanks to all who responded.  Just a little background, although thumb drive was standard, I password protected the individual files with Axcrypt.  I was using Malwarebytes and Eset full security but I think I found a files that could be the culprit to all this.  It was something like service.hostexe* and when I clicked on it, a pop-up appeared asking for a password and username. I did some research on this and it is described as a threat, although there is no way to know if this was responsible for the hack.  When I deleted it, it aromatically reinstalled itself upon reboot. It went undedected, but for any one who is curious, it was found in app data...roaming.  I have since reformatted my hard drive and it is no longer there. One this I noticed was that when you unplug a thumb drive from a pc, it writes some of the files to your hard drive which seems counterintuitive since one point of using an external drive is for privacy.

I know there is nothing I can do at this point, but I hope this helps someone in the future.

Thanks for responding.
This is the TX;

View on BTC.com
Bitcoin TRANSACTION
8884292a996c1515acade6d6c2ac3cbb4fa7079c3bd504249ee1e151049636b4

I recently opened electrum wallet to discover that 7.26 BTC was sent to an unknown address on Oct. 2.  I keep this wallet on a thumb drive, and the last time it had been connected online was late August.  If anyone has had a similar experience or could offer any thoughts on how this happened, I'd appreciate it.  Thanks.