I just had this happen on a client site last week - this was the first time I had ever experienced spam user registration. I turned off the "Anyone Can Register" option, but it's great to know now there is a plugin to help with this issue.