Right now I'm using the WP-Contact form however I've written one in the past that did a great job of filtering out some crap. The trick is to check for invalid characters/words before sending the email. Most contact forms are subject to header attacks which may or not be your issue. Drop me a line and I'll see if I can send it to you.