I have hosted 3 DNN sites on Arvixe under 3 different accounts and all 3 sites have the same problem. Where do you have hosted your infected sites?

I just changed the password strength to 11 and no new users for a long time. But that is not s solution since my new real users are not interesting this.

I believe the DNN Captcha is totally useless or it is not working with DNN registration process. That mean there is a way to skip the Captcha to register a new user even when we enable the captcha.

It is strange that still we do not have a solution. :(

I believe it is better if the core team can help us now.

... but as has been previously mentioned, a number of people have sites that need the verification/public mechanism (e-Commerce sites for example), so going private only solves the problem for a few....

Your comments about captcha appear to be correct and like you, I wonder how the Spammers get past that. A security gap IMHO.

... more testing
==========
I've just added an extra Profile field to the registration form, made it 'required' and tested it manually. All worked.

Unfortunately, I'm still getting SPAM registrations (they are coming in hot'n fast - thatnks for the test rig, spammers... )

So I guess the spammers aren't using the registration module at all (hence captcha and extra fields not working?? )
Another security gap maybe??

Regards,
Duncan.