I have added an extension that will go through and check with the anti-forum-spam database anytime a user tries to register. If it matches on name, IP, or email, the registration is denied. So will see how it works out.
And I have been going through existing users. Deleted about 50 thus far that were obvious bots. But still more to got through.