Same problem here, and the answer to your last question about the content of the crontabs is, "the string 'snap' is not in any of them." I've executed "perl /root/sys-snap.pl --stop" but of course I get the error "no such file."
Should I install SNAP so I can stop the cron?
Do you need to open a ticket?
The content of /var/spool/cron/root is:
23 15 * * * /usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1
48 14 * * * /usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1
#5,35 * * * * /usr/local/bandmin/bandmin
#27 0 * * * /usr/local/bandmin/ipaddrmap
#3 21 * * 1 (/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null)
3 21 * * * (/usr/local/cpanel/scripts/fix-cpanel-perl; /etc/upcp_control)
27 * * * * /usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check
6 */4 * * * /usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache
38 */4 * * * /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
22 */2 * * * /usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1
32 */2 * * * /usr/local/cpanel/bin/dbindex >/dev/null 2>&1
8 */6 * * * /usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1
*/5 * * * * /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
43 0 * * * /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
8,23,38,53 * * * * /usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1
0 2 * * * /usr/local/cpanel/bin/backup
5,20,35,50 * * * * /usr/local/cpanel/scripts/eximstats_spam_check 2>&1
0 */2 * * * /usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1
@reboot /usr/local/cpanel/bin/onboot_handler
12 21 * * * /usr/local/cpanel/3rdparty/quickinstall/scripts/getCache.pl
55 2 * * * /usr/local/cpanel/3rdparty/bin/freshclam --quiet --no-warnings
22 22 * * 7 /usr/local/cpanel/scripts/send_api_notifications > /dev/null 2>&1
09,39 * * * * /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1