File checks
The GuardXT file check is the heart of the application. It checks for changes in the file system. These changes may indicate that your site was hacked or at least that there's some unwanted activity.

The intial run obviously only should be executed once, ideally on a clean, fresh installation. The initial run builds a database for all files of your joomla installation. In all further check runs the current file system is compared against the database. Each new or modified file or folder goes into the list of unconfirmed files or folders. This list you should work through regularly and confirm the changes you did, e.g. by installing a new component and work on the changes you did not do or didn't want to happen.
Additionally all files and folders with permissions considered not to be secure are displayed - you can adjust the permissions via GuardXT directly.
Finally you may delete files from your tmp folder.

