Avoid random torrent sites. Legitimate archives will include a checksum (MD5) and clearly state "UPD" with a changelog.