Now that you've changed those settings to 0, see how it goes now. It sounds like that was probably your problem.
Some people say that using the Question and Answer verification is best. I use recaptcha. I think you just need to figure out which works best for your forum. (Spammers also seem to come in waves.)