access rules and _

I want to create an access rule that prevents spammers from creating user names like:

_nWEBaeObc_

But how can I create an access rule that recognizes the underscore as an underscore, rather than as any single character?

thanks for any help