Ouch

No, and I searched for that mp3 trojan before, but it didn't exist except as a benign proof-of-concept. If someone has modified and distributed it as malicious, then the latest security patches should have prevented what you describe.

The other situation I have read of that could done this involves some external firewire drives, but those have been fixed by a firmware update quite a while ago.

Sorry to hear of your troubles: PM the names of the files you tried and I'll see if I can reproduce the situation on a different home folder.

LW 4.0.6 Pro on G3 running a fully updated Panther 10.3.4 here.