There are some torrrents showing up with .lnkextension (ex: movie.mp3.lnk, tvshow.mkv.lnk…) and automated software (Sonarr, Radarr, Lidarr, qBittorrent RSS Downloader) could pick those torrents (but not import).

These (fake) torrents include a .lnk file that executes a script on your Windows


HOW TO exclude from download on qBittorrent.

  • Go to Options -> Downloads

  • Enable “Exclude file names”

  • Add patterns:

(one by line)

*.mp4.lnk  
*.mp3.lnk  
*.mkv.lnk
*.torrent.lnk 

Or exclude all together: *.lnk


Example on VirusTotal https://www.virustotal.com/gui/file/e74f64df6ebaf3a1b6e3f42591eb6e87d2ac2828eb5a99fd8d3d82c140137fc9/detection

17 points

Could you just add *.lnk?

permalink
report
reply
0 points
Deleted by creator
permalink
report
parent
reply
3 points

Ah yes you’re right

permalink
report
parent
reply
11 points

That’s mentioned near the bottom of the post.

permalink
report
parent
reply
90 points

I use Arch btw

permalink
report
reply
25 points

Me too, but don’t want to download GBs of malware and bandwidth

permalink
report
parent
reply
17 points
*

Weak.
Harbor disaster. Seed the malware. Spread the fruits of chaos amongst the unworthy. Be complicit in their downfall. Feed on their agony ^^/s

permalink
report
parent
reply
1 point

.lnk files are less than 4kb

permalink
report
parent
reply
5 points

That would seem suspicious. I’m sure they have some way to pad out the size.

permalink
report
parent
reply
3 points
*

Not these ones, some could have more than 1GB, look at the virustotal link, the file had 422MB.

Also Sonarr/Radarr filter torrents by size

Here some examples
https://bt4gprx.com/search?q=The.Lord.of.The.Rings.The.Rings.of.Power.S02E08

Those where posted on 1337x (and removed) and probably other sites, Sonarr can pick those based on release name and torrent size

PS: had to rename the fine from .lnk to .com so virustotal could accept

permalink
report
parent
reply
84 points

What if it executes and install Windows 11 on your machine!?

permalink
report
parent
reply
39 points

Oh lord please have mercy! Blacklisting the file extension right now!

permalink
report
parent
reply
9 points

ackshually the proprietary .lnk shortcut format can only be run on windows 🤓

permalink
report
parent
reply
5 points

A Linux executable can’t be named ending on .lnk? 🤔🤔

permalink
report
parent
reply
22 points

That would be the very worst malware. I mean both the malware that installed it and win11…

permalink
report
parent
reply
46 points

When I read the title, I was thinking of something sophisticated such as hidden executable streams inside the MKV container (IIRC, it’s possible to append binary data other than audio, video or subtitles specifically inside a MKV). The “.lnk” trick only works in Windows and, even there, it’s easy to prevent: Windows Explorer > Options > Advanced > find and check “Always show extensions for files” (i can’t really remember the exact label for this option as I’m not a Windows user, but something like this will be there).

permalink
report
reply
25 points

I believe you uncheck “Hide extensions for known file types”

permalink
report
parent
reply
8 points

Exactly! Thanks! I couldn’t point the exact label, I’ve been using Linux for years in a daily basis so I forgot most of the Windows shortcuts/options.

permalink
report
parent
reply
152 points

thanks Microsoft for hiding extensions by default!

permalink
report
reply
41 points
*

Yes, but also whoever set the defaults for the *arr tools. Why would any filename with extra shit past the extensions you’re looking for be considered an acceptable result?

Tack $ on the end of your regex, for fucks sake.

permalink
report
parent
reply
7 points
*

Is not regex
https://github.com/qbittorrent/qBittorrent/pull/17106

Examples
*.exe: filter ‘.exe’ file extension.
readme.txt: filter exact file name.
?.txt: filter ‘a.txt’, ‘b.txt’ but not ‘aa.txt’.
readme[0-9].txt: filter ‘readme1.txt’, ‘readme2.txt’ but not ‘readme10.txt’

permalink
report
parent
reply
20 points
*

Microsoft: De nada, amigo! Oh… here’s an ad, btw… and…did you enable Recall already?

permalink
report
parent
reply
12 points

or rather: oh silly you were so clumsy that you disabled recall by accident again. let us be so kind to re-enable it for you

permalink
report
parent
reply
4 points

Have you tried setting your region to Europe? it’s not an issue here

permalink
report
parent
reply
30 points

Yet another reminder that piracy on Linux is the way because new files don’t have execute permissions by default

permalink
report
reply
12 points

On many distros will open with WINE by default, not a big deal, you can just delete ~/.wine. If it does anything

permalink
report
parent
reply

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

!piracy@lemmy.dbzer0.com

Create post
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don’t request invites, trade, sell, or self-promote

3. Don’t request or link to specific pirated titles, including DMs

4. Don’t submit low-quality posts, be entitled, or harass others


Loot, Pillage, & Plunder


💰 Please help cover server costs.


Community stats

  • 4.3K

    Monthly active users

  • 1.5K

    Posts

  • 11K

    Comments