Might I suggest Re-Captcha (
http://recaptcha.net/) be used for the anti-bot system? It works pretty well, I use it on my SMF forum.
It won't keep actual people from generating pm's or posts when they first join, but it will surely keep the bots out.
