Soulseek.
Been using it for years, never encountered a single virus, or a "music-bomb", which I've never even heard of before until reading about it in this thread. Maybe it's because I download mainly smaller/indy music, so no one would bother to plant one of these so called bombs in music relatively few people would be downloading.