PS 1. I wouldn't deactivate anything under potential attack, usb is better, u can scan usb with multiple solutions on next shadow mode\time freeze session and there are many options of securing usbs: binisoft usb flash drives control and panda usb vaccine 2. use external usb\drives hybrids...