There are some torrrents showing up with .lnkextension (ex: movie.mp3.lnk, tvshow.mkv.lnk…) and automated software (Sonarr, Radarr, Lidarr, qBittorrent RSS Downloader) could pick those torrents (but not import).

These (fake) torrents include a .lnk file that executes a script on your Windows


HOW TO exclude from download on qBittorrent.

  • Go to Options -> Downloads

  • Enable “Exclude file names”

  • Add patterns:

(one by line)

*.mp4.lnk  
*.mp3.lnk  
*.mkv.lnk
*.torrent.lnk 
*.zipx
*.scr
*.arj
*.lzh

Or exclude all together: *.lnk


Example on VirusTotal https://www.virustotal.com/gui/file/e74f64df6ebaf3a1b6e3f42591eb6e87d2ac2828eb5a99fd8d3d82c140137fc9/detection

        • Aatube
          link
          fedilink
          67 months ago

          That would seem suspicious. I’m sure they have some way to pad out the size.

            • Aatube
              link
              fedilink
              47 months ago

              Not necessarily. Even with “hide extensions” unchecked, Windows hides the .lnk extension by default; it just shows an arrow in the bottom-right corner of the icon, which is plausibly missed when in the list view. I’m surprised antivirus doesn’t know about it already tbh.

        • @[email protected]OP
          link
          fedilink
          English
          4
          edit-2
          7 months ago

          Not these ones, some could have more than 1GB, look at the virustotal link, the file had 422MB.

          Also Sonarr/Radarr filter torrents by size

          Here some examples
          https://bt4gprx.com/search?q=The.Lord.of.The.Rings.The.Rings.of.Power.S02E08

          Those where posted on 1337x (and removed) and probably other sites, Sonarr can pick those based on release name and torrent size

          PS: had to rename the fine from .lnk to .com so virustotal could accept

      • LiveLM
        link
        fedilink
        English
        20
        edit-2
        7 months ago

        Weak.
        Harbor disaster. Seed the malware. Spread the fruits of chaos amongst the unworthy. Be complicit in their downfall. Feed on their agony ^^/s

      • @[email protected]
        link
        fedilink
        English
        247 months ago

        That would be the very worst malware. I mean both the malware that installed it and win11…

      • Aatube
        link
        fedilink
        117 months ago

        ackshually the proprietary .lnk shortcut format can only be run on windows 🤓

        • Avid Amoeba
          link
          fedilink
          English
          57 months ago

          A Linux executable can’t be named ending on .lnk? 🤔🤔

          • Aatube
            link
            fedilink
            67 months ago

            Making such a polyglot that can run on both systems requires much more effort for little gain.