Thanks, Pekelo.Quote from Pekelo:
Now to actually answer the OP's question, I think it has to do with lack of interest and jurisdiction.
First, if it is only spamware, that might not be illegal in lots of states. Second, the company could be offshore, so US law doesn't apply to them.
So first you have to find an entity that has jurisdiction wherever the company is registered and they also has to show interest in the prosecution, if there is any law that applies to the case, what might not be the case.