this doesn’t sound good. I would disable all registrations immediately, clean out all of the users whom have been added, delete all of your wp and bp files and reinstall to make sure that you don’t have any modified files. And you might examine the db tables closely to see if they need may need repair.
