WHORUFILE is help to protect your server for hacking.
You can defanse to create malware file on server.
if And you want to check virus check on virustotal, you need to virustotal api key. check below link.
2017.01.31 – Check file certificate and write in a log.
2017.01.23 – Offer file detail information when find to suspicious file .
“whorufile -u” : uninstall whorufile service type.
Syslog_IP=192.168.0.1 <– Send to log at syslog server, When input IP address.
File=false <– If you want to logging on the local machine, input here for true.
DirectoryPath=ALL <– If you need to only audit some folder or drive, input here. Default option is all drive.
Trust_List= notepad.exe <– If you need to trust item, input here.