In my case it was clamd causing the issue, re-installing it sorted the problem (could test by temporarily disabling clamd on Moodle if you are running it)