I probably have an answer of this. I'm 95% sure that it was from the bitcoinbsv site. Since that version is equal with mine.

Why don't you think that? What is a replay protection?

I did take a look into blockchair.com/ and that transaction was followed by 2 transactions. And I can follow those two transaction into other transactions as well. So I guess that it was a hack.. Or is it anything that I can look after to tell that it wasn't a hack?

Btw is electrumsv.io a legit site? Perhaps it's worth to mail them to ask if they are aware of any malware in their portable wallet..

How do I check my BIOS after malware?

Yes and no. There are probably a lot of people that has 1, 10, 100 and even more BSV. If they have 100+ coins that they collect from a fork then there are chances that there is some of it in BTC as well.
If the crypto hackers collected all private stuff then the chance to find a big treasure is really big, isn't it? The hard part is to collect it since they need to use the wrench method
 

Do you have any examples of software that does that?


Yes I can tell you that it was more then some days between the BCH and BSV transactions. And in BCH I made some transactions to move it, BSV did one transaction.

Yes I did move my other coins before trying to get the fork coins.

I get your point that it is very unlikely that they got more then my coins. But I'll never knew for sure but I thought of getting a fresh computer with some dummy pictures, glasswire to see the network traffic.  And then run the program and see what happens. If the upload is more then some MB or not. I could even look what the size of the images is before and after. Because I guess that if the malware infected my photos it probably changes the size of images?

Perhaps I could get some https://www.canarytokens.org/ to see if that trigger something. Another thing I was thinking of was to decompile the software, however it's probably not that easy. 

I have collected some fork coins and now it was time to collect bitcoin SV.
I not really sure but I think I went trough https://bitcoinsv.io/services/wallets-and-exchanges/ and picked electrumsv.io. Then i downloaded the portable version here https://electrumsv.io/download.html. At that time it was another version then 1.3.6.

I did import all of my keys into the wallet. Then there was a transaction with all of my coins...

I know that the coins are gone. But I'm a bit concerned over my privacy. It was my personal computer with some photos and files. Should I be worried that the malware wallet uploaded everything it can get to a server somewhere and that some others have all of it?

Could the malware wallet see all of my browsing history and all of my saved accounts into sites (usually I'm not saveing that but could be some site or two..).  If I could see my history it probably can see my facebock.com/user/myusername.

I havn't used my computer since it happened. Is there any loggs that windows saves that I can get anything from?

Could the malware wallet infect images and files or could I copy them from that computer and save them in another location?

Edit
I did found out that another bitcoinsv site (scam site) had the same version as mine. So the sites that I mentioned above is probably not involved with this, as long as the linked to the download site wasn't replaced in some way. But probably not.
However I didn't find any browser history of that site. Don't know if the program cleaned that(?)