Sun Jun 07, 2015 9:28 am by MightyMouse
Could it be done? - Yes.
Is it likely that you would come across one of these? - Well, if someone hands you a drive and it screws your computer... do you have someone to suspect? And maybe get violent with? Clearly. So it isn't quite the same as anonymous virus distributors.
If it is a concern, then get the person with the drive to show it works on their computer first. Never put a drive you just happen to find into your computer, but then why would you? Especially with Autorun being the default on many systems.
Compared with viruses, this costs the malefactor money, and usually makes their identity obvious. So I can't see it being such a big deal. There are just so many easier/cheaper ways to cause someone aggravation. Which of course I will not go into.