I not have not mailscan or antivirus' boxes checked on my system but i have more then 10 clamscan process running. Like 14397 web11_in 25 0 32300 29m 692 R 3 1.4 2:27.85 clamscan 14560 web11_in 25 0 32300 29m 692 R 3 1.4 2:34.94 clamscan 14564 web2_ale 25 0 32304 29m 692 R 3 1.4 2:30.71 clamscan 14568 web2_ale 25 0 32172 29m 692 R 3 1.4 2:24.24 clamscan 14581 web8_ale 25 0 32304 29m 692 R 3 1.4 2:31.95 clamscan 15094 web2_ale 25 0 32172 29m 692 R 3 1.4 2:25.34 clamscan ... but both users are not use mail and virus scan but only spamcheck What's wrong?
If you see clamscan processes, the virus scanning for the users must be acticvates. Please post the content of the file .procmailrc that is in the home directory of one of these email users.