well, I did disabled antivirus scan for all users already. to be sure I will check that.
I have done this update in DB
update isp_isp_user set status='u',antivirus=0,user_spamfilter=1;
yes, user can switch on antivirus scan on web. but this is not hapend often. usualy they have antivirus on their PC.