Client asks for help; they seem to be sending out spam and don't know why. Sounds like a hacked server. I deal with these all the time.
Turns out to be a Windows server (uh-oh), and turns out they're running ColdFusion. (UH-OH!)
Thank you, but no. Please find someone else. This is a mess even I don't want to get involved in.