This Trojan horse has the potential to do any of the following:
- Delete all of a user's personal files
- Send an e-mail message containing a copy of itself to other users
- Infect other MP3, JPEG, GIF or QuickTime files
(http://www.intego.com/news/pr40.html より)

これだったらroot権限がなくても実行できるのでは？