One (very) small part of the puzzle may be to disable autorun from your system. To do this copy the following three lines into a new .txt file, then rename the file to "DisableAutorunINF.reg", and then double-click the file and say yes to the prompts. Then logoff and logon again. That will disable autorun.inf's from hitting you. Here's the three lines of text.
If you ever want to re-enable autorun.inf's again, then do this. Copy the following two lines into a new .txt file, then rename the file to "EnableAutorunINF.reg", and then double-click the file and say yes to the prompts. Then logoff and logon again. That will enable autorun.inf's. Here's the two lines of text.
I recently had to deal with a nasty piece of malware (amvo.exe) which was using autorun.inf as part of its strategy. One bit of advice that helped me was this (but, I can make no guarantee that it will help you.)
first of all, (only if you are comfortable with regedit) use regedit to delete the keys with reference to the files you know are part of the malware's arsenal.
then run cmd to open a DOS window
enter the following commands
taskkill /im explorer.exe /f (comment: since many of these nasties use explorer to replicate themselves)
then troll to the offensive folder using your DOS prompt.
use one of these commands to see any hidden files (if necessary)
you can then use the following command to kill whatever the bogus file is (substituting the bogus file name for bogusfile.bogus)
del bogusfile.bogus /f /q /as (commment: OR /ah OR /ahs depending on what dir command switch you used to 'see' the file in the directory listing)
since you might have bogus autorun.inf files in several places, then change to the any other drives say, d: and repeat the same thing and then e: and repeat the same thing, etc.
then after you have killed off all the vermin
hope this helps at least in some way
If you want to get some protection in place against future things coming in via thumb drives, you could visit http://autorun.synthasite.com
. Sorry I can't be of more help to you since I'm a newbie and probably know less than you.
I trust someone with more knowledge will come along soon and help you further!