Autorun on D:
I can't remember if it was XP or 98, but I can confirm that there were actual released consumer versions of Windows that would run AutoRun.Inf off the root of a hard drive.
No damage (the USB had already been disinfected), but I discovered that when I copied the kid's USB to the spare/storage hard drive.