Automatic creation of users
Disabling block is pointless. You need to truly disable registration itself. Go to Administration » Configuration » People and under Who can register accounts? select Administrators only. If that's not enough, make sure you have all security updates installed.

Note: exact path to this setting may be a bit different in Drupal 6 or 8, but you should be able to find it easily enough.