Thanks UFHH01
I was going to say that must be the definitive answer to this question, but it seems not...
For me the relevant cron job was in:
/etc/cron.d/drweb-update
I had to add >/dev/null 2>&1 to the script in that file - which is running every 30 minutes. Here is the full, fixed, line...