Seems clamd is trying to restart in a infinite loop.
Maybe is clashing with amavis trying to restart clamd too.
My solution was to stops clamd service at Dashboard.
Unfortunately, rebooting the server, needs to stops manually the clamd process.
Seeking the logs:
Aug 16 00:56:14 painel clamd[3342]: LOCAL: Socket file /var/run/clamd.amavisd/clamd.sock is in use by another process.
Aug 16 00:56:14 painel clamd[3360]: Received 0 file descriptor(s) from systemd.
Aug 16 00:56:14 painel clamd[3360]: clamd daemon 0.99.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Aug 16 00:56:14 painel clamd[3360]: Running as user amavis (UID 990, GID 989)
Aug 16 00:56:14 painel clamd[3360]: Log file size limited to 1048576 bytes.
Aug 16 00:56:14 painel clamd[3360]: Reading databases from /var/lib/clamav
Aug 16 00:56:14 painel clamd[3360]: Not loading PUA signatures.
Aug 16 00:56:14 painel clamd[3360]: Bytecode: Security mode set to "TrustSigned".
Aug 16 00:56:19 painel clamd[3360]: Loaded 6321412 signatures.
Aug 16 00:56:20 painel clamd[3360]: LOCAL: Socket file /var/run/clamd.amavisd/clamd.sock is in use by another process.
Aug 16 00:56:21 painel clamd[3491]: Received 0 file descriptor(s) from systemd.
Aug 16 00:56:21 painel clamd[3491]: clamd daemon 0.99.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Aug 16 00:56:21 painel clamd[3491]: Running as user amavis (UID 990, GID 989)
Aug 16 00:56:21 painel clamd[3491]: Log file size limited to 1048576 bytes.
Aug 16 00:56:21 painel clamd[3491]: Reading databases from /var/lib/clamav
Aug 16 00:56:21 painel clamd[3491]: Not loading PUA signatures.
Aug 16 00:56:21 painel clamd[3491]: Bytecode: Security mode set to "TrustSigned".
Aug 16 00:56:25 painel clamd[3491]: Loaded 6321412 signatures.
Aug 16 00:56:27 painel clamd[3491]: LOCAL: Socket file /var/run/clamd.amavisd/clamd.sock is in use by another process.
(...)