Problem with spam registrations

Help! I have spam users in my blog list. How did this happen and how can I remove it (and keep it from happening)? People registering for a site are suppose to PAY. How would/could spam get through? I do have antosplog (as a drop in plugin). Thanks...