Force Disable Tamper Protection

Modified on Mon, 5 Nov, 2018 at 11:30 AM

Boot the system into Safe Mode.
Click Start > Run > type services.msc > right-click Sophos Anti-Virus service > Properties > set the Startup type to Disabled > then click OK.
Click Start > Run > type regedit and then click OK.
Go to the following location in the registry editor:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection\Config
Set the following DWORD values to 0: SAVEnabled and SEDEnabled
Go to the following location in the registry editor:
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\SAVService\TamperProtection and set the REG_DWORD Enabled to 0.
Reboot the system in normal mode.