[root@server /]# rpm -V qmail
.M...UG. /var/qmail/alias
..5....T /var/qmail/queue/lock/tcpto
and this is what I got this morning, it was an email to about 6 people, using outlook as a mail client
1123464129.546456500 qp 2125: to=remote.email@address, uid=401, ddelay=186.061047, xdelay=183.039739, stat=Sent (xxx.xxx.xxx.xxx_accepted_message./Remote_host_said:_250_ok:__Message_1754967_accepted/)
1123464132.100846500 qp 2125: to=remote.email@address, uid=401, ddelay=188.615437, xdelay=182.581575, stat=Sent (xxx.xxx.xxx.xxx_accepted_message./Remote_host_said:_250_ok:__Message_1754976_accepted/)
1123464231.451499500 qp 2125: to=remote.email@address, uid=401, ddelay=287.966090, xdelay=145.464161, stat=Sent (xxx.xxx.xxx.xxx_accepted_message./Remote_host_said:_250_ok:__Message_1755142_accepted/)
I removed the email address, but it was to one of the people on the list, and it was sent to him 3 time's before I removed it from the queue, it could have been sent more than that if I didn't remove it.
the only change that happaned was updating ClamAV, I got the email notifying me that new updates are available and to go to /tmp/UCA/ and install them, and that's when I started noticing the problem.
I might try uninstalling ClamAV and see if that solves the problem, but I'll wait for a day before I do that incase someone can suggest something else.
cheers