Thanks for the reply, in the exim configure i not add the parameter "scanner = sophie".
i only add this config:
spamd_address = x.x.x.x 11333 variant=rspamd
deny malware = */defer_ok
message = This message contains a virus ($malware_name).
by default exim tries to connect with sopho sophie.