Hi,
Please disable the registration and then add another verification tool - i.e. recaptcha field, we don't have any influence on the spam user/newsletter subscribers. In the quickstart package there are only several users added (for the activity content) and they may be removed by your WordPress -> Users section.