Microsoft released patch to Autorun hole

In Windows XP, Windows Vista, and Windows Server 2003, AutoRun entries were populated for all devices that had mass storage and had a validly formatted AutoRun.inf file in the root directory. This included CDs, DVDs, USB thumb drives, external hard disks, and any volume that exposed itself as mass storage. This update disables AutoRun entries in AutoPlay, and displays only entries that are populated from CD and DVD drives. Effectively, this prevents AutoPlay from working with USB media.

The patches can be download from

Update for Windows XP (KB971029)

Update for Windows Vista (KB971029)


Reference:
http://support.microsoft.com/kb/971029