Another vote for no AV.

Block exe's at the corporate firewall and keep your OS patched. Any malware that isn't due to web browsing or email attachments is going to be zero-day anyhow and the AV software will be useless.

As for thumb drives -- users shouldn't be able to run exe's that you don't approve.