Clean adds/leaves extra lines in php files when removing base64 strings causing PHP Fatal errors about linux-malware-detect HOT 1 CLOSED

This is a difficult matter as not all malware injections are created equal in which case sometimes it is desired to insert a line break to space out the malware from the closing php flag which often is on the same line as the malware. If we dont separate the close from the malware, it would get stripped from the code as well and break even more scripts in cleaning attempts.

The cleaning of files is certainly not perfect and is something actively being worked on to improve. Further, with 1.5 it is now easier for anyone to write cleaner scripts.

from linux-malware-detect.