Yes thats true, but if you edit 4 of them the times will be different
Also I do not really like the 'key logger' excuse, if you ever used a key logger then you would know that the output is nothing more then a text file showing all the keystrokes you have made. It will never say 'my user id and password for guildwars are ...'. So a hacker will see a username in the form of an e-mail address and a password, there he goes but what is it for? Now unless you enter Guild Wars with the message 'Hellow I am in Guild Wars' its going to be a little harder then that, so if the hacker is not bothered with ready the whole logfile he might find out, download the game, install the game and log onto the game. Now it seems this hacker has the intention to do harm so he is going to delete characters, only 4 out of 8?? Wow what a rush! But its doubtful that this is going to be the case.
So lets presume that he installed some 3rd party software to who knows what ... with Guild Wars, the hacker in this case knows what Guild Wars is and has it installed. Now lets all presume that we are the hacker, what would we do in this situation. Right lets go trough all his chars and look for the rare skin weapons, lets go the vault and see if he has allot of gold and ecto's and other expensive materials. Yet it seems that in his case he still has all his gold and ecto's and other valuable materials, he even has 4 other chars and nothing is missing on those. So I think the thieving hacker is out of the question!
Lets not even go into virus, spyware or adware, they do not delete chars in GW.
A script? Yes, but then this is a very genius script, to be able to log in, select gw chars, recognize screen names (ocr technology) and start deleting them. I don't think so!!! The reason is very simple, it would delete everything and it doesn't make the process go any faster since its server side based and it cannot make the deletion go any faster.
As an IT engineer I receive this sort of situations on a dayly bases, not with GW of course, but files that disappear and so on, the biggest mistake is to make assumptions about what could have gone wrong, no you look at the evidence and make an analysis based on what you got. And what do we have here?
We have officials showing him a log file that 4 chars have been deleted at exactly the same time, now your explanation about log files doesn't make sense because log files don't poll every 30 seconds or even 60 seconds, if they would then they would need giant server rooms just to do that on its own. No my friend, log files are based on operations and it will only add a piece of information follow by a certain operation and it will use the exact time stamp for it.
We also have a mail stating that the operation occurred from his own IP address, I am afraid by doing so they have actually placed hackers out of the picture, so that leaves us with him deleting his own chars and as we know it is impossible to delete 4 chars at the same time client side.
But true evidence comes out of how people react and respond and the way Areanet is responding by not willing to respond on the matter anymore tells us allot. They seem to simply ignore him and the fact that he is a 'CUSTOMER' doesn't seem to interest them the least.
The fact that he spend allot of time to getting his chars were they were and to get them a nice armor and weapons is simply whipped of the table as if it doesn't matter, I even wonder if you can take legal actions against Areanet based on all of this.