7
I don't think Protector is going to cure the problem. Suggest installing it but he has other problems. His hotmail account is getting compromised, unless that password is stored in XOOPS that will keep getting nailed. The cracker will more than likely keep coming in without triggering Protector.
Protector isn't going to protect against a poor config or poor server security. How is the hotmail account getting nailed "every hour"? Clearly something else is going on.
FYI, if you do install Protector you should watch it closely or you might end up with 100s of pages of "violations" that really aren't. Some modules like chat apps will trigger protector and cause other grief. You have to start at the server and move up until you finally protect the site that is as secure as it can be already.