i have used ATS on at least 20 projects. Everyone has many more files and folders than any premium wp theme I have ever purchased including those with several selectable sliders and admin panel options, lol. For real. But yes… there may be an answer for this. I think that in general, his problem is basically coming from being on a shared server that possibly has some email spammers using the same server for marketing BS, POS sites and that the hackers in general are just found his site by seeing what sites are on that server and hacking them. Unfortunately, even with the new updates to WP, I can hack any site in about 30 seconds. If I want to be nasty, I start leaving my posts with links in them for Viagra and all kinds of other dopy stuff. If I want to be really nasty, I just hack 3 files and then I own his site to the point that not even his hosting co can get it back until I decide to let them. That is of course unless the Hosting co does a complete wipe of his account and he rebuilds from scratch. Oh yes, this is very possible. However, you see hijacking much more prevalent than hacks or destructive ends simply because some determined marketers (i.e. really stupid and persistent people who believe warrior forums will make them rich) will do anything they can to put a stupid post on your site. Something like “Yeah, this is an excellent article, keep up the good work…. by Viagra here!!” So they do this by MySql inject or simply sending requests for info to your server once they find one on a server that all ready has spammers on it. This way they get thru some issues because the spam sites have the server ip blacklisted which causes some securities to be lowered in hopes of helping the normal users sites to still be able to send and receive emails to other email users of systems like gmail or aol and msn in particular. So I do not believe this to be a theme problem more likely a hosting co or a spammer filled server ip problem. My next question would be, do you have many emails being returned saying that they have been blocked by msn or aol? If so, its probably given the server ip as the problem due to that server having spammers all over it. Try getting your hosting co to put you on a different server or ip address. You can also purchase your own ip for like 5 bucks from a lot of hosting co’s. Hope this helps.