There are some torrrents showing up with .lnkextension (ex: movie.mp3.lnk, tvshow.mkv.lnk…) and automated software (Sonarr, Radarr, Lidarr, qBittorrent RSS Downloader) could pick those torrents (but not import).
These (fake) torrents include a .lnk file that executes a script on your Windows
HOW TO exclude from download on qBittorrent.
-
Go to Options -> Downloads
-
Enable “Exclude file names”
-
Add patterns:
(one by line)
*.mp4.lnk
*.mp3.lnk
*.mkv.lnk
*.torrent.lnk
Or exclude all together: *.lnk
Example on VirusTotal https://www.virustotal.com/gui/file/e74f64df6ebaf3a1b6e3f42591eb6e87d2ac2828eb5a99fd8d3d82c140137fc9/detection
Nice one OP. Just had sonar pick up one of these today named like a proper release of a trusted group. Sonarr didn’t move it from qbit but better to not DL it in the first place even though its a linux box
that executes a script on your Windows.
I don’t have a Windows.
thanks Microsoft for hiding extensions by default!
Yes, but also whoever set the defaults for the *arr tools. Why would any filename with extra shit past the extensions you’re looking for be considered an acceptable result?
Tack $ on the end of your regex, for fucks sake.
Is not regex
https://github.com/qbittorrent/qBittorrent/pull/17106
Examples
*.exe: filter ‘.exe’ file extension.
readme.txt: filter exact file name.
?.txt: filter ‘a.txt’, ‘b.txt’ but not ‘aa.txt’.
readme[0-9].txt: filter ‘readme1.txt’, ‘readme2.txt’ but not ‘readme10.txt’
Microsoft: De nada, amigo! Oh… here’s an ad, btw… and…did you enable Recall already?
Not using Windows helps a ton :)
I use Arch btw
ackshually the proprietary .lnk shortcut format can only be run on windows 🤓
That would seem suspicious. I’m sure they have some way to pad out the size.
Not these ones, some could have more than 1GB, look at the virustotal link, the file had 422MB.
Also Sonarr/Radarr filter torrents by size
Here some examples
https://bt4gprx.com/search?q=The.Lord.of.The.Rings.The.Rings.of.Power.S02E08
Those where posted on 1337x (and removed) and probably other sites, Sonarr can pick those based on release name and torrent size
PS: had to rename the fine from .lnk to .com so virustotal could accept
