We're running Plesk with drwebd antivirus and on all of our servers there are a few defunct drweb processes. There isn't anything untoward in the mail logs, most of these processes are more than a few days old..
drweb 3369 0.0 0.2 26528 20620 ? Ss Sep23 3:16 /opt/drweb/drwebd
drweb 5300 0.0 0.2 26660 20708 ? S 11:16 0:00 /opt/drweb/drwebd
drweb 5301 0.0 0.2 26696 20796 ? S 11:16 0:00 /opt/drweb/drwebd
drweb 5302 0.0 0.2 26728 20824 ? S 11:16 0:00 /opt/drweb/drwebd
drweb 5303 0.0 0.2 26660 20728 ? S 11:16 0:00 /opt/drweb/drwebd
root 9099 0.0 0.0 3744 644 pts/2 R+ 12:25 0:00 grep drweb
drweb 29723 0.0 0.0 0 0 ? Z Sep25 0:00 [drwebd]
drweb 29724 0.0 0.0 0 0 ? Z Sep25 0:00 [drwebd]
drweb 29725 0.0 0.0 0 0 ? Z Sep25 0:00 [drwebd]
drweb 29726 0.0 0.0 0 0 ? Z Sep25 0:00 [drwebd]
drweb 29748 0.0 0.0 0 0 ? Z Sep25 0:00 [drwebd]
drweb 29749 0.0 0.0 0 0 ? Z Sep25 0:00 [drwebd]
drweb 29750 0.0 0.0 0 0 ? Z Sep25 0:00 [drwebd]
drweb 29751 0.0 0.0 0 0 ? Z Sep25 0:00 [drwebd]