Compared clamav databases to two other sites with similar setup. The daily and main databases were different and clam was owner both. Stopped clamd, copied the daily and main from other boxes replacing the ones in the troubled box. Had to change owner of main database to clam. Restarted clamav, content filtering, and mail AV. Box is working now. Will watch for any changes with morning updates.
Thanks for the input Nick!