the default has been set to do nothing because of false positives i believe…
meaning htat when a false positive is caught, nothing bad will happen.
This in a business environment means no problems for the administrators to fix possibly hundreds of clients… instead they receive a report and take action on that one machine…