No, backup is not automatic, you must set up a way to back the site up.
However, I'm not sure if that's the biggest concern here, but rather forms a totality of your Moodle setup that greatly places your site and your users at risk
As somebody who works in IT Security, please heed my advice and:
1. Put HTTPS on Moodle.
2. Stop using Windows XP, which has not received security updates for over 3 years. Yes, this impacts Moodle, because if you're a system administrator of your Moodle instance you are opening your administrator credentials up to and thus your site, a major exploit. There's no excuse to be using it any more.