Apparently, and unfortunately, the virus phenomena has caught up with Last.FM. (Or maybe it just took that long to hit my profile.) Luckily, I was suspicious and savvy enough not to click on the infected links. Phew!
In the past couple days I've received notices for my Shoutbox that contained links. Each were from people on my Friends list (obviously hacked). The first especially seemed legit except that I have seen just enough spam crap like this in my various email accounts that I decided to hold off on clicking the links just in case.
The first red flag was that the comment never appeared on my actual profile. Secondly, it wasn't noted activity on the sidebar of that person's profile.
The biggest red flag of all was that the root address of the link didn't look familiar to me at all. That was the kill shot for me so I just let it sit, untouched.
Then I got another notice that contained nothing but a link. No extra commentary as in the one above. Again, not a recognizable root address. When I checked that friend's profile, there were other comments there where others were posting that she may have left a virus on their profiles. Note: since then, Last.FM has removed that comment which only backs up my suspicion.
So, be on guard about clicking links on your Lst.FM profiles regardless of how well you may know and trust that person. Sure, there will be good and safe links but be vigilant about studying the root addresses and such before clicking.