SPAM with comments and pings disabled??

I’ve got Captcha installed and was still getting piles of Spam comments. Of course they were all going to my “moderation” list not to my site. But I was getting tired of the spam so I did the UPDATE SQL query to disable comments for all posts and for all pings, but I’m still getting SPAM. How can that be?????!!!!

Is this is a known issue with a known fix in a recent release – beyond 2.0.4? Upgrade is enough of a pain that I don’t want to upgrade unless I”m getting a fix to this problem.

I can’t even imagine how they are getting comments into my blog, that require moderation, with comments turned off on all pages and posts. Earlier I suspected that they had broken the admin password, and changed it. But if the admin password were compromised, the comments would not end up in “moderation” but would go straight to the posts. I have stopped all the spam in moderation for several months and still they persist. Of course if it is automatic robots pushing an exploit, they don’t care if they make it or not.

blog is at http://www.windyweather.net/wp/

Also, the emails from wordpress indicate that all the domains are coming from one hosting service navicosoft.com. I have sent them an email with wordpress email attachments and ask them to stop the spammers. Is that the best recourse that we have?

Thanks,
windy