It's been a month since the discovery of a bug (in both the WinXP desktop-shell and WinAmp) wherein MP3 files can sport buffer-busting code in the ID3 tag. I know that LW already detects "invalid" downloads somehow -- does this include MP3s with invalid ID3 tags? This would be a built-in way to block the spread of infected files!