Conflict between Kaspersky and VBS – Virtualization-Based Security

[Rafael Lino]

Hello,

I am facing a compatibility issue between Kaspersky Premium and the Virtualization-Based Security (VBS) feature on my system. Kaspersky does not activate hardware virtualization protection, and the following message is displayed: "Hardware virtualization is not available: hardware or software incompatibility detected."

After investigating, I realized that Kaspersky requires hardware virtualization to offer protection against advanced threats, but to enable this functionality, I had to disable VBS in the Windows settings. This caused the deactivation of a critical security layer in the system.

System Details:
- Processor: AMD Ryzen 7 9800X3D
- Motherboard: Gigabyte X870 GAMING X WIFI7
- Operating System: Windows 11 Pro
- Antivirus: Kaspersky Premium

Actions Taken:
- Disabled VBS in the system settings to allow Kaspersky to use hardware virtualization.
- After disabling VBS, hardware virtualization protection was enabled in Kaspersky, and the error notification disappeared.

Questions:
- Security: Disabling VBS has resulted in a reduction of the system's security. VBS is an important layer of protection against advanced attacks (such as rootkits and exploits), and by disabling it, the system becomes more vulnerable to these types of threats.
- Compatibility: Is there a way to configure Kaspersky to work with hardware virtualization without disabling VBS? Alternatively, is it possible for Kaspersky to offer a solution that works well with VBS enabled?

I would appreciate any guidance or solutions to help me enable both or if there are any settings in Kaspersky that I can adjust to maintain the security layers intact while using hardware virtualization protection.

Thank you for your help, and I look forward to your response.

Best regards,  
Rafael Lino

[fabiodanzetta]

Hi @Rafael Lino to my knowledge at the moment it is not possible to simultaneously use the Kaspersky hypervisor and have VBS enabled in Windows.
Therefore if you want to use Kaspersky's hypervisor at its 100% you have to disable Microsoft's VBS.

Best Regards.

[Rafael Lino]

The antivirus has deep control over the system for protection and is compatible with the entire system, but this integration does not occur seamlessly when VBS is enabled, as VBS is responsible for activating Memory Integrity.

When Kaspersky takes over virtualization, the question arises: does it fully or partially assume the role of VBS? Can it manage memory protection in a similar way, blocking or modifying settings like VBS and Memory Integrity?

[Schulte]

Hello @Rafael Lino,

the problem is that Windows only allows a single active hypervisor.

You have to decide what is trustworthy for you.
Kaspersky basically covers all virtualized MS security features, and has done so for several years longer than MS.
The simple question is: who do you trust more with the security of your computer? Kaspersky or MS? Do you use Defender or a Kaspersky product? It's your decision...

Here is another reliable statement on the subject: