I enabled a multi question deal for registration which I use on another one of my sites and works very well. That should stop 99.9% of the spam registrations. I also put a match captcha on the login which will suck, but prevent spammers who did register from logging in.