Editing EICAR test file (section)

== Adoption ==
According to EICAR's specification the antivirus detects the test file only if it starts with the 68-byte test string and is not more than 128&nbsp;bytes long. As a result, antiviruses are not expected to raise an alarm on some other document containing the test string.<ref>{{cite web |title=Download Anti Malware Testfile – Eicar |url=https://www.eicar.org/?page_id=3950 |language=de-DE |access-date=22 September 2020 |archive-date=28 April 2022 |archive-url=https://web.archive.org/web/20220428213743/https://www.eicar.org/?page_id=3950 |url-status=dead }}</ref> The test file can still be used for some malicious purposes, exploiting the reaction from the antivirus software. For example, a race condition involving [[symlink]]s can cause antiviruses to delete themselves.<ref>{{cite web |title=Exploiting (Almost) Every Antivirus Software – RACK911 Labs |url=https://rack911labs.ca/research/exploiting-almost-every-antivirus-software/}}</ref>