No "MailScan" is not activated for any user.
Code:
ls -la
total 8
drwx------ 2 u1_admin web1 4096 Apr 2 19:16 .
drwx------ 5 u1_admin web1 4096 Apr 1 08:21 ..
-rw------- 1 u1_admin web1 0 Apr 2 19:16 1143994587.4555_0.server.staks.org
I found someting this hapend only when (admin user) receive HTML massage if the massage is Plain text everiting is OK