Oh yeah!!!(remember kids, with exclamation marks, it's one or none!)
But basically if the file size looks too small to be true(or too big to be true), don't be fooled. Also, there's this one that appears as a WMV or something like that, and it's file name is always just what you type, so watch out for them.
I don't think there's any feasable way to 'catch' this person, though. Just block that IP address(the FAQ tells you how to do this) if they annoy you so much.