Conflict between Kaspersky and VBS – Virtualization-Based Security

[Rafael Lino]

Hello,

I am facing a compatibility issue between Kaspersky Premium and the Virtualization-Based Security (VBS) feature on my system. Kaspersky does not activate hardware virtualization protection, and the following message is displayed: "Hardware virtualization is not available: hardware or software incompatibility detected."

After investigating, I realized that Kaspersky requires hardware virtualization to offer protection against advanced threats, but to enable this functionality, I had to disable VBS in the Windows settings. This caused the deactivation of a critical security layer in the system.

System Details:
- Processor: AMD Ryzen 7 9800X3D
- Motherboard: Gigabyte X870 GAMING X WIFI7
- Operating System: Windows 11 Pro
- Antivirus: Kaspersky Premium

Actions Taken:
- Disabled VBS in the system settings to allow Kaspersky to use hardware virtualization.
- After disabling VBS, hardware virtualization protection was enabled in Kaspersky, and the error notification disappeared.

Questions:
- Security: Disabling VBS has resulted in a reduction of the system's security. VBS is an important layer of protection against advanced attacks (such as rootkits and exploits), and by disabling it, the system becomes more vulnerable to these types of threats.
- Compatibility: Is there a way to configure Kaspersky to work with hardware virtualization without disabling VBS? Alternatively, is it possible for Kaspersky to offer a solution that works well with VBS enabled?

I would appreciate any guidance or solutions to help me enable both or if there are any settings in Kaspersky that I can adjust to maintain the security layers intact while using hardware virtualization protection.

Thank you for your help, and I look forward to your response.

Best regards,  
Rafael Lino

[fabiodanzetta]

Hi @Rafael Lino to my knowledge at the moment it is not possible to simultaneously use the Kaspersky hypervisor and have VBS enabled in Windows.
Therefore if you want to use Kaspersky's hypervisor at its 100% you have to disable Microsoft's VBS.

Best Regards.

[Rafael Lino]

The antivirus has deep control over the system for protection and is compatible with the entire system, but this integration does not occur seamlessly when VBS is enabled, as VBS is responsible for activating Memory Integrity.

When Kaspersky takes over virtualization, the question arises: does it fully or partially assume the role of VBS? Can it manage memory protection in a similar way, blocking or modifying settings like VBS and Memory Integrity?

[Schulte]

Hello @Rafael Lino,

the problem is that Windows only allows a single active hypervisor.

You have to decide what is trustworthy for you.
Kaspersky basically covers all virtualized MS security features, and has done so for several years longer than MS.
The simple question is: who do you trust more with the security of your computer? Kaspersky or MS? Do you use Defender or a Kaspersky product? It's your decision...

Here is another reliable statement on the subject:

 

[Rafael Lino]

Thank you all for your valuable input. As a long-term Kaspersky customer, I fully trust the company’s expertise and its approach to endpoint protection. However, I would like to kindly suggest that an official technical document or video be made available, clearly outlining how Kaspersky’s hypervisor-based protection effectively compensates for the security mechanisms provided by Microsoft’s Virtualization-Based Security (VBS) when it is disabled.

In the cybersecurity field, it is common to see third-party security solutions replace or complement native Windows components, such as the firewall, without triggering system-level alerts. However, the case of VBS is somewhat distinct, as its deactivation prompts explicit notifications from the OS, signaling the removal of a critical security layer.

That being said, my initial concern regarding the compatibility issue has been addressed, and I appreciate all the assistance and insights shared here.

[fabiodanzetta]

Hi @Rafael Lino What procedure did you use to completely disable VBS since it seems it is not very easy to disable it completely and I had to follow a procedure that also made me modify registry keys?
 

Thanks

[Rafael Lino]

12 hours ago, fabiodanzetta said:

Hi @Rafael Lino What procedure did you use to completely disable VBS since it seems it is not very easy to disable it completely and I had to follow a procedure that also made me modify registry keys?
 

Thanks

1. Click on Windows Security.
2. Go to Device Security.
3. Under Core isolation, click on Core isolation details.
4. Turn Memory integrity to Off.
5. Restart your PC.

Edited March 18 by Rafael Lino

[Rafael Lino]

I know, 'Turn Memory Integrity to Off' sounds like something you definitely shouldn’t be doing... but sometimes it’s just the way it is.