ok, so... Changing clamd to run as the amavis user (and changing ownership of /tmp/clamd, /var/clam, var/log/clamd, etc etc) fixed the problem, BUT... it worked running as the clamd user for at least six months. ?????????????????? computers suck.