MasonSquelch

The 'Wordfence' plugin is very helpful: it scans life traffic on your site, allows you to block users, IPs, whole IP blocks; it regularly scans your WP install and detects altered files. Seems that's what your friend is looking for.

__________________
Mental Sinema - Wanktrance Outfitter