[zmanda_it]

I'm running into a problem where spammers are using our forum to host spam in the "About Me" area of their account. Somehow an automated bot has been able to register hundreds of accounts using an easily-compromised mail host in russia. The originating IP addresses are mostly (if not all) Russian. There are too many to delete by hand, and vB doesn't have an option to mass delete by search criteria. I'd be willing to do cleanup by hand if I could get the vast majority of accounts in an automated fashion. Here is an example SQL query that returns 560 results:

select userid,ipaddress,lastvisit,lastactivity,posts from vb3_user where email like '%mail.ru' and posts = 0 and abs(lastvisit - lastactivity) < 3600 order by ipaddress;

These are all accounts whose registration and last activity are nearly identical, who have zero posts, and are registered using the same mail host in Russia. vB support states that user accounts are deleted from the following tables:

user
userfield
usertextfield

then, additionally, every table with a userid field has to be gone through and fixed. However, these accounts have no activity and zero posts, so is it safe to assume that all tables other than the 3 mentioned are clean w/respect to the accounts mentioned? Is it safe to delete the accounts with matching UIDs directly from the 3 mentioned SQL tables and be done with it?

Thanks