It seems that users are changing groups?
 

I have two groups - and "junior member" is not one of them. I have noticed that a couple of spammers actually changed the default group to "junior member" and user group icon. Is this a setting I missed? Thanks.

More than likely its a custom plugin doing it

Well I have custom titles and noticed in the User Title Management that it showed junior member, member, and senior member. I deleted these as I believe these can be changed in user cp for resetting user group and title. However, I still see this option in user cp. How do you remove this option, or will it simply not work since I deleted the three groups? thanks

This might help:

ACP --> Usergroup Manager --> Usergroups --> General Permissions --> Can Use Custom Title: yes/no

Thanks, they are all changed to NO... however, even in my profile I still see this:

Reset

This is the title that appears beneath your name on your posts. Check the 'Reset' box if you wish to use the default title for your usergroup and post count.

Are you looking at your admin profile as it won't be the same as a normal members profile

Yea I was. However, when I check what tbworld indicated all user groups showed NO for Custom Title. So I'm not sure how a spammer was changing it...

If "$show['canusecustomtitle]" is disabled in the ACP (as I described in my previous post) then the option block in template "modifyprofile" is disabled and it should not show.

--------------- Added 16 Sep 2014 at 19:38 ---------------

I would log in as the spammer and see what he has access to. Checking your access logs can provide valuable insight here on an identity's activities.

Thanks, I'll have to what until someone spams and account again. I deleted all of them...

Sure thing. :)