How to Disable Windows Defender (Tamper Protection & Real-time Protection)

Windows Defender can block or quarantine the loader before it starts. You need two protections off: Tamper Protection and Real-time protection. Methods 1 and 2 use Windows Security and are quick but temporary. Method 3 makes the change stick.

Method 1: Turn off Tamper Protection

Do this first. While Tamper Protection is on, Windows switches the other settings back.

1. Open Start, search for Windows Security and open it.

2. Select Virus & threat protection.

   

3. Under Virus & threat protection settings, click Manage settings.

4. Set Tamper Protection to Off.

   

Method 2: Turn off Real-time protection

1. Make sure Tamper Protection is already off (Method 1).

2. In Windows Security, open Virus & threat protection → Manage settings.

3. Set Real-time protection to Off.

   

Method 3: Keep Defender off with Defender Control

Defender Control is a free, portable tool from Sordum that switches Defender off with one click and keeps it off.

Download it

1. Download Defender Control from the official site, sordum.org.
2. Your browser and Defender will probably flag the download. That's expected: any tool that changes security settings gets flagged. It is a false positive.

If Chrome blocks the download

Option A: keep the file (try this first)

1. Press Ctrl + J to open your downloads.

2. Find the blocked file.

   

3. Choose Keep dangerous file.

   

Option B: pause Safe Browsing for one download

Only use this if the Keep option doesn't appear.

1. Open Chrome's three-dot menu and go to Settings → Privacy and security → Security.

2. Under Safe Browsing, choose No protection (not recommended).

   

3. Confirm with Turn off.

   

4. Download Defender Control again.

5. Go back and set Safe Browsing to Standard protection straight away.

Run it

1. Extract the ZIP. The password is sordum.

2. Turn off Tamper Protection and Real-time protection first (Methods 1 and 2), or Defender will delete the tool as soon as you extract it.

3. Run dControl.exe. The window shows Defender's current state.

   

4. Click Disable Windows Defender. The window turns red when Defender is off.

   

5. Open Menu → Add it to the Exclusions List so Defender never removes the tool.

   

Next step

Defender is one of five requirements. Continue with Memory Integrity, then work through the rest of the troubleshooting guide.