Well if the guy, who has hacked it, has managed to change the password somehow, nothing can be done about that account except reporting the matter to Orkut administrators. Your friend should better create a new account.
Does he still have access to the account?
If yes then he can reset his password by clicking "Can't access my account" on Orkut home page.