Wow,
Thank you all for some excellent responses.
The use of control characters was puzzling...

Here is the accompanying javaScript. It is pure evil.

<SCRIPT language=JavaScript>
<!-- // Start of AdSubtract JavaScript block; you can ignore this.
     // It is used when AdSubtract blocks cookies or pop-up windows.
document.iMokie = "cookie blocked by AdSubtract";
document.iMferrer = "referrer blocked by AdSubtract";
function iMwin() {
    this.location = "";
    this.frames = new Array(9);
    this.frames[0] = this;
    this.frames[1] = this;
    this.frames[2] = this;
    this.frames[3] = this;
    this.frames[4] = this;
    this.frames[5] = this;
    this.frames[6] = this;
    this.frames[7] = this;
    this.frames[8] = this;
    this.length = 0;
}
// End of AdSubtract JavaScript block. -->
</SCRIPT>
[download]

I don't think it's related to the form action.

I'm glad I can some here for solutions.
When someone like my father gets this kind of spam in Netscape mail, it can get ugly real fast.

A most tolerant Perl friend also tried a solution.
You can try it at www.codegeek.org/qh/
He included a link to the source code for those who are curious.
Just a guess, but I think the /qh/ stands for "quick hack" :)

Thanks again to eveyone.