Windows Update says:
"Install this update to restrict AutoRun entries in the AutoPlay dialog to only CD and DVD drives. After you install this item, you may have to restart your computer."
Been waiting for this one since the problem was autorunning CD and DVD drives, and we've gone through a few UI revisions that make it harder to turn autorun off. Now black hats will have to leave CDs around parking lots and cafeterias instead of dropping USB sticks. Bonus points for printing a music album cover on the disk (anyone know how much it costs for the equipment to do that?) and for laying down the tracks on it in addition to the data.