Antiviruses will stop drivers being loaded, or files being modified.
Search for Virus & Threat Protection
All options must be disabled, you can re-enable them once spoofed.
Make sure, real time protection, dev drive protection, cloud-delivered protection, automatic sample submission, and tamper protection are all disabled.
