I'm guessing its a bug in clamav and/or spamassassin with a cpu/memory leak.
On CentOS 7 I ran: clamscan --version
And got the current version (ClamAV 0.102.4) in the epel repo.
On a server I don't have spamassassin running, just ClamAV there isn't a problem.