Normally, spam data is created as a script and put in the database. A simple way to check for spam abnormalities is by going to PHPmyAdmin and browsing to see the tables in the database. If you see any table with a very high number of rows, try opening it and looking at it. Details of that table will be easily found.