Advice would be nice too from someone with more experience in fighting spam.

I noticed that all spam had links using these two addresses:

1. www.up0.net (most of it)
2. www.elabs3.com

I checked up0.net on whois and it turned out to be the same company:

WHOIS RECORD ON WWW.UP0.NET:
Front Page Information
Website Title: EmailLabs Home Page
Title Relevancy 66%
SEO Score: 66%
Terms: 142 (Unique: 103, Linked: 15)
Images: 10 (Alt tags missing: 10)
Links: 13 (Internal: 3, Outbound: 10)
AboutUs: Wiki article on Up0.net

WHOIS RECORD ON WWW.ELABS3.COM
Front Page Information
Website Title: EmailLabs Home Page
Title Relevancy 66%
SEO Score: 66%
Terms: 142 (Unique: 103, Linked: 15)
Images: 10 (Alt tags missing: 10)
Links: 13 (Internal: 3, Outbound: 10)
AboutUs: Wiki article on Elabs3.com

Then I opened their home page and it was email marketing firm. What is the next step.