Before I choose "recommended actions (default value)" I want to know what those actions are. What does Ewido automatically do in each case (by default)? I want Ewido to automatically quarantine everything it finds, as I have set NOD32 to do. I do not want Ewido to automatically delete ANYTHING until I've reviewed the "threat(s)" first. That way, Ewido won't delete something that I need. Ewido 4.0 does have more options than 3.5, and there's a learning curve. On the downside, Ewido 4.0 uses a lot more resources than its predecessors. I have to run scans when I'm not doing anything else because it slows my system down so much that I can't work: Firefox, Word, Acrobat, other real-time programs, etc.