Hardware virtualization Archives

Winsage

March 11, 2026

How to disable Hyper-V for Windows 11

Microsoft's Hyper-V is a hardware virtualization platform integrated into Windows 11 Professional, Enterprise, and Education editions, allowing users to host multiple virtual machines (VMs) on a single computer. It operates using a type 1 hypervisor directly on hardware, enabling VMs to share resources like CPU, memory, and storage. Hyper-V includes features such as dynamic memory allocation, software-defined networking, and saved checkpoints. IT administrators may need to disable Hyper-V due to compatibility issues with third-party virtualization software, high-precision applications, or driver conflicts. Disabling Hyper-V can also affect security features reliant on it, such as virtualization-based security (VBS) and Device Guard. Methods to disable Hyper-V include: 1. Using the Windows Features dialog. 2. Executing a PowerShell command: Disable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V-All, HypervisorPlatform, VirtualMachinePlatform. 3. Running a DISM command:

dism /Online /Disable-Feature /FeatureName:Microsoft-Hyper-V-All /FeatureName:HypervisorPlatform /FeatureName:VirtualMachinePlatform

. 4. Using the bcdedit command: bcdedit /set hypervisorlaunchtype off. 5. Modifying Group Policy to disable VBS. 6. Editing the Windows Registry to disable VBS or Credential Guard. For multiple managed computers, administrators can create and execute a PowerShell script or use Group Policy Objects to streamline the process. Testing in a controlled environment is recommended to ensure desired outcomes without compromising security or functionality.

AppWizard

November 10, 2025

Windows 11 ends Android app support: practical workarounds

Microsoft has discontinued the Windows Subsystem for Android and its integration with the Amazon Appstore on Windows 11 due to low demand. Users can no longer use an official Microsoft method to install general Android apps. The primary alternatives are Google Play Games on PC, which focuses on gaming, and third-party emulators like BlueStacks, LDPlayer, and GameLoop for a broader range of applications. To use Google Play Games, users need a PC with at least 8 GB RAM, a modern quad-core processor, hardware-accelerated graphics, SSD storage with 10 GB free, and hardware virtualization enabled. Users must enable virtualization in their UEFI or BIOS settings and activate the Virtual Machine Platform and Windows Hypervisor Platform in Windows. Emulators allow users to run full Android apps on Windows. They can download apps from the Google Play Store within the emulator or sideload APK files. Users should be cautious about security risks when sideloading apps and stick to reputable sources. Performance tuning for emulators involves allocating sufficient resources, resolving virtualization conflicts, and optimizing settings like resolution and frame rate. Users are advised to install on SSDs and minimize background tasks for better performance.

Winsage

November 4, 2025

Russian hackers abuse Hyper-V to hide malware in Linux VMs

The Russian hacker group Curly COMrades has been using Microsoft Hyper-V to bypass endpoint detection and response (EDR) solutions by creating a concealed Alpine Linux-based virtual machine for running malware. They have deployed proprietary tools, CurlyShell and CurlCat, within this virtual environment to maintain operational stealth and secure communication. Active since mid-2024, the group targets government and judicial entities in Georgia and energy companies in Moldova. In early July, they gained remote access to two machines, activated Hyper-V, and disabled its management interface to deploy a minimalistic virtual machine that hosted their malware. This tactic allowed them to evade traditional host-based EDR detections. The virtual machine was configured to use the Default Switch network adapter, making malicious traffic appear to originate from the legitimate host's IP address. CurlyShell executes commands and maintains persistence, while CurlCat facilitates covert traffic tunneling. The group also utilized PowerShell scripts for persistence and pivoting to remote systems, including injecting Kerberos tickets into LSASS and creating local accounts via Group Policy. Bitdefender advises organizations to monitor for abnormal Hyper-V activation, LSASS access, and suspicious PowerShell scripts.

Tech Optimizer

October 7, 2025

6 Windows hardening steps that don’t break gaming or DRM

Windows 11 is not the most secure operating system by default but offers ways to enhance security without affecting gaming performance. Gaming PCs are vulnerable to cyber threats and should adopt security measures. Customizing Windows Firewall allows users to maintain internet access for gaming applications while ensuring security. Users should add key game executable files to the "allowed apps" list and consider using SimpleWall for better control over network activity. Using a standard account for gaming sessions enhances security by limiting admin account access, which should be reserved for software installation and updates. Implementing multi-factor authentication for both admin and standard user accounts adds an extra layer of security. Windows Defender has improved and can be an efficient antivirus option, but third-party solutions may conflict with gaming performance. Game files should be added to Windows Defender's exclusion list to avoid performance issues. Disabling unnecessary Windows services can enhance security and performance by reducing the attack surface and freeing up resources. Common services to disable include Cellular Time, Connected Devices Platform Service, and Telemetry. Secure Boot protects against malicious software during the boot process and may require BIOS adjustments. It does not affect gaming performance and is often necessary for games with kernel-level anti-cheat systems. Memory Integrity and Core Isolation are advanced security features that protect against low-level attacks by creating an isolated environment for critical processes. These features require minimal resources if the CPU supports Intel's Mode-Based Execution Control (MBEC) or AMD's Guest Mode Execution Trap (GMET). Balancing security measures with optimal system performance is essential for a secure gaming experience.

Winsage

September 10, 2025

5 ways to run Windows apps on MacOS – and 2 are free

VirtualBox is a free virtual machine manager that allows users to run Windows as a guest OS on MacOS. Kegworks is a free implementation of Wine for MacOS, optimized for versions 10.15.4 and later, supporting Windows applications and games. CrossOver is a paid solution that simplifies running Windows applications on MacOS, offering a free trial and user-friendly documentation. Parallels is a hypervisor that enables seamless virtualization of Windows and Linux on MacOS, available for a subscription with a free trial. Windows 365 Cloud PC is a cloud-based service that provides virtual Windows PCs, requiring a stable internet connection, with plans starting at a monthly fee.

BetaBeacon

March 14, 2025

Google wants to make every Android game playable on PC

Google has launched a beta program for playing Android games on PC, which has gradually expanded compatibility to include thousands of titles.

AppWizard

July 2, 2024

How to Easily Install Android Apps on Your Windows 11 PC

- The best way to install Android apps on Windows 11 is through the Amazon App Store. - Microsoft will soon remove support for this feature, so users should use it while it is still available. - Amazon Appstore on Windows 11 will be discontinued on March 5, 2025, but apps already installed can still be used. - Google Play Store is not available on Windows 11, but it can be installed using a third-party tool called PowerShell Windows Toolbox. - Sideloading Android apps on Windows 11 is an alternative method, but it comes with risks such as varying performance and exposure to malicious software.

BetaBeacon

June 28, 2024

Android: How to Enable Hardware Virtualization | Cellular Insider

Hardware virtualization allows one physical machine to run multiple virtual machines (VMs) with their own operating systems and applications.