Ouch, that hurt!
TC indeed is very weak when it comes to AutoRun prevention, noticed this in my personal tests during the last weeks, too.
It will be interesting if Tencent cares for those findings, they better do.
Could you do this test with Q360, too, please?
I know that the HIPS are strong at this kind of attacks however in the past failed on code injection (svchost.exe for example).
And, if you manage to install Rising (according to VT at least signature-wise a great product on 0-days) proper (I didn't on multiple tries with their genuine installer), it would be a nice addition to the China trio.
Thank you for the review
@cruelsister, you have been missed