Change actions on detection!!

The down side to using cleanup/delete is that if it detects something critical or something it shouldn't (rare, but as reading the posts here will show, not inconceivable), you'll end up losing something you probably didn't want to lose.

Of course, if you use a backup solution, you can always restore from backup, which should work as long as the file deleted isn't critical to your system and you have a log saying what got deleted.

Short answer: cleanup/delete makes much more sense as a default for on demand scans than it does for on access -- although you may want to try "Deny access and move threat" -- then you can easily see if you've broken something, and know what files need to be restored.

The down side to using cleanup/delete is that if it detects something critical or something it shouldn't (rare, but as reading the posts here will show, not inconceivable), you'll end up losing something you probably didn't want to lose.

Of course, if you use a backup solution, you can always restore from backup, which should work as long as the file deleted isn't critical to your system and you have a log saying what got deleted.

Short answer: cleanup/delete makes much more sense as a default for on demand scans than it does for on access -- although you may want to try "Deny access and move threat" -- then you can easily see if you've broken something, and know what files need to be restored.