A lot of people have suggested using a machine dedicated solely to examining suspicious USB keys. Good advice. This is why I have kept a Windows XP machine on the office network, with full Internet access to so I can keep McAfee up to date.