app-antivirus/clamav-0.100.2 installs 2 systemd units for clamd: /lib/systemd/system/clamd.service /lib/systemd/system/clamav-daemon.service clamd.service seems to be the one that should be killed as it forks clamd in the background (not systemds philosophy) and it's also not related to clamav-daemon.socket (but clamav-daemon.service is).
*** This bug has been marked as a duplicate of bug 662196 ***