Linux or windows vps? Theirs a big difference.
I personally wouldn't rely on software to protect my website. I recommend learning sql injection and pentesting your website w3af is really simple...
Most likely your friends website got hacked and the hacker and mass spammed with or it or an or the attacker used it to spread with exploit on...
Separate names with a comma.