I just noticed on a 4.1.0 site - that tellfriend.php was being used to send Spam.

I renamed the file for now - until I can get in site with the site owner to see what he wants to do.

But I wanted to make a post here - as there appears to be an issue in 4.1.0 tellfriend.php

You may want to rename it to something else until this is looked into.

Smoge