As reported in https://lists.debian.org/debian-user/2016/03/msg01091.html, the default configuration now sends out cronspam once every four hours. It can be disabled with si_dbs="" in /etc/clamav-unofficial-sigs.conf.d/local.conf Dominic.