Step-by-step launch of Medusa Spoofer. It changes your hardware fingerprint and cleans traces, so run it before the game and its launcher start.
Requirements
- Windows 10 (any build) or Windows 11 up to 23H2, x64
- The game is protected by BattlEye — other anti-cheats are out of scope
- Intel or AMD CPU, Xeon and FX included
System requirements
Preparation
The Medusa loader brings its own driver, so Defender, Core Isolation and the unsigned-driver block have to be off before the first launch.
Remove third-party antivirus and anti-cheats Kaspersky, Avast, ESET and the like, plus FaceIT and Riot Vanguard, conflict with the loader. They must be uninstalled, not just paused.
-
Open Settings → Apps → Installed apps (or Control Panel → Programs and Features).
-
Uninstall any third-party antivirus (Kaspersky, Avast, AVG, ESET, 360, Malwarebytes, etc.). Pausing or disabling is not enough — the antivirus driver stays resident.
-
Uninstall the FaceIT AC and Riot Vanguard anti-cheats if present — they block third-party software at the kernel level.
- FaceIT is the CS2 anti-cheat, Vanguard is the Valorant one. If you don't play those games, they are safe to remove.
After removing an antivirus, restart the PC — some of its services only unload after a reboot.
Fully disable Windows Defender The #1 cause of "it won't launch". Disable it for real: manually first, then remove it from startup, reboot, and finish it off with Defender Control.
-
Step 1. Turn protection off by hand. Open Windows Security → Virus & threat protection → Manage settings and switch every toggle off:
- Real-time protection — Off.
- Cloud-delivered protection — Off.
- Automatic sample submission — Off.
- Tamper Protection — Off. Turn this one off first, otherwise the others switch themselves back on.
-
Step 2. Disable reputation-based protection. In Windows Security → App & browser control → Reputation-based protection → Settings, turn everything off (SmartScreen, potentially-unwanted-app blocking).
-
Step 3. Remove Defender from startup. Open Task Manager (Ctrl+Shift+Esc) → Startup apps tab, find Windows Security notification icon and click Disable.
-
Step 4. Restart your computer. This is mandatory — some Defender services only unload after a reboot.
-
Step 5. Finish with Defender Control. Download Defender Control (archive password: r1xon), run it as administrator and click Disable Windows Defender — the tile turns red.
- If your antivirus deletes the utility itself, protection is still active — go back to step 1. The file ships zipped on purpose so Defender can't wipe it before it's disabled.
Don't skip steps 3–4. "I turned the toggles off but it didn't help" almost always means Defender came back after restart because it was left in startup.
Disable Core Isolation Memory Integrity blocks the driver from loading. Takes a minute to switch off.
-
Open Windows Security → Device security → Core isolation details.
-
Turn off Memory Integrity and restart the PC.
-
Install the latest Visual C++ Redistributable download Visual C++
-
Install .NET Framework download .NET Framework
-
Lift the driver-loading block: run win11_driver_OFF.reg and confirm the registry entry. The file is in the Medusa account area under "Downloads"
-
Reboot the computer — the changes do not apply until you do
-
Fully close the game and its launcher: the spoofer changes identifiers before the anti-cheat starts, not during the match
Launch
-
Download the Medusa launcher from your account area, "Downloads" section. The account links sit under this page title — pick the region closest to you
-
Run the launcher as Administrator, paste your key into the License key field and press Activate
-
Press Inject — the spoofer console opens
-
Enter your seed phrase or press Enter to generate a new one. The same phrase always produces the same identifier set — write it down if you want to return to the current fingerprint
-
Wait for the CHANGED lines for Hard Drive, MAC Address and GPU — those are your new values
-
Answer Yes to the anti-cheat trace cleanup question if your account was banned. The spoofer removes hardware traces, registry entries and resets system identifiers
-
Once System successfully cleaned appears, start the game
Problems & fixes
Critical error occurred
A loader-level critical error. Sometimes it shows up without affecting anything — press "Skip" and carry on. If the product stops working after it, contact support.
free_driver_info_ex
Windows Defender is still on. Go back to the preparation step, disable Defender completely and reboot the PC.
Cannot map physical address 0x1000
Disable Windows Defender and Core Isolation, then uninstall third-party anti-cheats — FaceIT, Riot Vanguard, ACE.
Driver status: C0E90002
Driver-loading is still blocked. Run win11_driver_OFF.reg as Administrator, wait until the black console window closes on its own, then reboot.
Driver status: ?
Either the driver is already loaded, or your Windows build is unsupported. Press Win, run winver and compare the build with the product requirements.
Driver already loaded
Reboot and start again. If it comes back on every launch, contact support.
d3dx9_43.dll error
DirectX SDK (June 2010) is missing. Go back to the DirectX installation step and complete it.
Failure connect
The launcher could not reach the server. It may be vendor-side maintenance or your ISP — try later or switch on a VPN.
Subscribe expired
The subscription has run out. Check it under "Subscriptions" in your account and renew.
Subscribe banned
The subscription was blocked by the developer. Message us and we will find out why.
HWID mismatch
The key is already bound to another PC. One key works on a single machine — moving it requires an HWID reset.
HWID reset requested, expect a decision
The HWID reset request is already in the queue. Wait for the decision — sending it again will not speed things up.
Server internal error or Unrecognized response
A failure on the developer's server. Try again in a few minutes; if it persists, contact us.
The menu does not open after a successful launch
The game was started without admin rights. Close it and run the game launcher as Administrator — the game inherits the rights.
Advanced setup — only if it still won’t launch
Update Visual C++ and DirectX Up-to-date runtimes keep the loader and overlay from crashing at start.
-
Install Visual C++ Redistributable x64 and restart the PC.
-
Update DirectX if you haven't in a while.
Use a VPN for download and activation CIS ISPs often block the activation servers. A VPN is needed while downloading the loader, activating the key and injecting — you can turn it off before joining a match.
-
Use a full VPN (an app that routes all traffic), not a browser proxy, VLESS or extension — half the support tickets come from exactly this.
-
Turn the VPN on before downloading the loader and activating the key. If something won't load, switch country (Europe or the US usually work).
-
After a successful inject you can turn the VPN off before the match to avoid extra ping.
A VPN fixes most endless-loading and "key won't activate" problems.
Sync Windows time A wrong system clock breaks key authorization against the license server.
-
Open Settings → Time & language → Date & time, enable Set time automatically and click Sync now.
FAQ
Which anti-cheats are supported?
BattlEye only. For games on EAC, RICOCHET, ACE or a proprietary protection the developer makes no promises — pick a spoofer built for that anti-cheat.
What exactly does it change?
HWID Drive, Hard Drive ID, the MAC address and the GPU UUID. After it runs, the console prints the new values right in the window.
Will it help after a ban?
That is what it is for: it changes the hardware fingerprint and cleans traces of previous sessions. But a ban does not always rest on hardware alone — the account, IP, files and behaviour all count, and nobody can guarantee the outcome.
When should I run it?
Run it before a gaming session, ahead of the game and its launcher — the spoofer changes identifiers while the anti-cheat is not reading the system yet. The developer separately recommends running the trace cleanup after every account ban.
Where do I get the key after payment?
The key arrives instantly after payment — it appears on the order page and lands in your email, and if Telegram is linked to your account, our bot sends a copy too. This guide opens from there as well.
Still stuck?
Run R1XON Checker first — it pinpoints most launch problems in 30 seconds. If it still fails, attach the checker report to your support ticket and we’ll sort it out fast.