Movie titles being renamed.

[MTBadDog 1]

I noticed this morning that I had 4 movie titles renamed to "300mbunited.com/forums rapidpremium.net 300mbunited.com" or "300mbunited.com ( LIVE LINKS always ) | rapidpremium.net ( one account to rule em all )".   Has anyone else noticed this?  There doesn't seem to be any commonality to the movies i.e., different genres, download dates etc.  It seemed to start after I added the OpenSubtitles plugin, but can't be positive.

Edited February 14, 2021 by Phil Schroeder

[Happy2Play 9783]

Sorry no, but can you go over a specific example.

[MTBadDog 1]

I can't really give an example, my logs only go back to 02/10/21.  But in those logs I can see the library monitor refreshing them all the way back to those dates.  Since the title started with "300" they would have all been near the top of the lists and I can't believe it has been much longer than that without me noticing.  I would suspect malware, but this is a dedicated OpenSUSE 15 VM that serves no other purpose than being an Emby server.

[Happy2Play 9783]

Is your media coming with nfo files and Emby is reading these?  But a specific example going over folder structure, file naming and existing metadata would help understand what you are seeing.  Identified items do not just change unless something else is changing the items metadata.  

[MTBadDog 1]

That's a good point.  Since I already renamed them, I'm assuming that emby would have updated the nfo files.  Let me go look at some backups and see what they look like.  Otherwise I can try to find an original copy and look there.  Didn't think of that, thanks.  I recently had to do a restore and that would have recopied the original nfo files back down.

[MTBadDog 1]

Hmm.  There is no nfo file in the last backup that was done on the 12th.  The primary source for scraping is the Open Movie dB, right?

[Happy2Play 9783]

9 minutes ago, MTBadDog said:

Hmm.  There is no nfo file in the last backup that was done on the 12th.  The primary source for scraping is the Open Movie dB, right?

By default only TMDB is enabled.  OMDB has to be manually enabled.

[MTBadDog 1]

So here's what I'm thinking.  In the nfo files, <original title> wasn't changed, only <title>.  Since that has to be changed through Emby, unless there is malware on a machine with write access to the smb share, I'm wondering if tmdb got compromised temporarily.  I searched tmdb for parts of the string I posted at the top with no results.  I'm not overly concerned at this point, if it was aggressive malware it would have torn through my entire library instead of 4 random mkv files.  By the way, that is one common thread I didn't see before.  They were all MKVs.  Since I shy away from mkv in favor of mp4s, they represent a small part of my overall library.

[Happy2Play 9783]

Without logs and specific examples it is really hard to say.  Emby does not randomly change Titles of already Identified items.

[MTBadDog 1]

That's what I thought, especially the <title> tag that is mostly a user preference - I use that field to make movies sort the way I want.  Yeah, the log issue is a problem.  Is there a place where I can change the retention period?

[Luke 42081]

When the subtitles change the metadata gets refreshed, so yes it's possible that it's happening when subtitles are downloaded. 

[Happy2Play 9783]

2 minutes ago, MTBadDog said:

I use that field to make movies sort the way I want. 

But that is what come from providers.  You should use the SortTitle for sorting.

3 minutes ago, MTBadDog said:

Is there a place where I can change the retention period?

Yes, the system.xml. (*\Emby-Server\programdata\config) path will be platform prevalent.

[MTBadDog 1]

Ah - Ok, I'll use that from now on, I thought it was <original title> that came from the providers.   I found it at  /var/lib/emby/config/system.xml (for anyone reading this thread in the future) and the tag is <LogFileRetentionDays>.  The daily logs are pretty small, so 30 days should be fine.  Thanks for spending time with me on this.  Like I said, I'm not overly concerned at this point, it's just a brain teaser.  If I can figure anything else out, I'll post it here.  

[Happy2Play 9783]

7 minutes ago, MTBadDog said:

The daily logs are pretty small

That is very subjective of server usage and if you enable debug logging as day logs can be multiple Gb.

[MTBadDog 1]

4 minutes ago, Happy2Play said:

That is very subjective of server usage and if you enable debug logging as day logs can be multiple Gb.

 Thanks for the heads up!  Guess it's time to build a syslog server.  At least it's just my wife and I using it so there won't be anyone with torches and pitchforks showing up.  Of course she can be quite formidable when a service she is using goes down.

[Carlo 4561]

Hi, out of curiosity what do you have this setting for that library?

[Luke 42081]

@MTBadDog ?