stealed over 4000 namecoins

[khal]

Have you searched for the txid ? (first 8 chars for example)

namecoin delete logs uppon restart if size is bigger than 10MB (dixit someone else on the bitcoin forum, not checked), but if you find previous commands it has not been deleted.

If you don't find anything, it's strange... It means someone has stop namecoin, moved logs, made his sends and rename file back, which mean a total control of the user running namecoin. Do you have some strange connections with : w, who and last commands ?