I have temporarily blocked new registrations. If you want to register in the next little while....please send me an email. Certainly, if the spam continues, it's not related to registrations and I'll turn it back on.
I can't seem to find anything suggesting a security hole in vBulletin....maybe I just haven't looked long enough. Updated to the latest version and still have the problem.