is it possible to steal my ether when I unlock my account? The private key is stored in my local storage. I am running geth on my PC.
How can someone make transaction with my account? without my private key? 
I checked that the endpoint port is not opened. 
But someone has stolen my (ropsten) ether. 
you can check this account (the persone who stole my ether, but seems others too..) 

<https://ropsten.etherscan.io/address/0x6ef57be1168628a2bd6c5788322a41265084408a>

What else should I check for my PC (running geth node) ?