Ack! Spam in my comments!

Well, it looks like it's official.  I've had my first SPAM on my drupal blog advertising garbage.  While I've cleaned it out for now, it looks like I'm going to have to install some kind of SPAM protection.  In some ways I'm surprised that they managed to find this small site, however I can't say it's that unexpected given the volume of SPAM out there.

At first glance the best package out there seems to be Mollum, does anyone have experience working with this package?

Secondly it would appear that we've got users/bots signing up here for accounts right now.  I'm going to need to clean them out as well, but what's the most efficent way to do this?  I already have email confirmation on, but would a CAPTCHA make more sense?

Lots of things to think about while my code runs today.