From http://wordpress.org/support/topic/spam-users-in-wp_users-after-wpsc-upgrade/page/4?replies=174