i know noex said that the authcheck of the sro-db server only gets the charname from that bot, but it seems like only ppl using the old crack for 0.8 are getting hacked.
the 0.8 crack does not remove the connection to the authserver. so maybe there's more than just the charname, that gets send tro the sro-db servers...
in that case their bot was designed as a keylogger right from the begining.
to make realy sure they are NOT able to hack you, you should NOT use cracks released before the 0.9a one by noex.
maybe he should rewrite the old 0.8 crack to remove the authserver connection to the sro-db server.

is what gets send if you're using the old 0.8 crack.
as you can see the connection to i59F47E8B.versanet.de is still active and the authserver recives some informations about ur account.
if u're using the newer crack for 0.9a that connection will not exist.
you could also use

, which removes that check from all bots released by sro-db.
it should be working fine for version 0.8, 0.9 and 0.9a, which are also availble @ that link =). for newer versions some stuff needs to be added, which i'm not able to do.
do NOT ask me if i could crack botversions released after the 0.9a one. i'm not able to do that. all i did was analyzing noexs cracks to be able to build a patcher which does the job for all versions.