To enable or disable the rollback of malware actions via Kaspersky Security Center:
Open Kaspersky Security Center Administration Console.
In the Managed devices folder of the console tree, open the folder with the name of the administration group to which the relevant protected virtual machines belong.
In the workspace, select the Policies tab.
Select a Light Agent for Windows policy in the list of policies and open the Properties: <Policy name> by double-clicking.
In the Light Agent for Windows policy properties window, select the System Watcher section in the list on the left.
In the right part of the window, the System Watcher component's settings are displayed.
In the Rollback of malware actions section, do one of the following:
If you want Kaspersky Security to roll back actions that were performed by malware in the operating system, select the Roll back malware actions during disinfection check box.
If you want Kaspersky Security to ignore actions that were performed by malware in the operating system, clear the Roll back malware actions during disinfection check box.
Click the Apply button.
To enable or disable the rollback of malware actions in local interface:
In the left part of the window, in the Anti-Virus protection section, select System Watcher.
In the right part of the window, the System Watcher component's settings are displayed.
If the settings in the local interface are not available, this means that the values of settings defined by the policy are used for all protected virtual machines of the administration group.
In the Rollback of malware actions section, do one of the following:
If you want Kaspersky Security to roll back actions that were performed by malware in the operating system, select the Roll back malware actions during disinfection check box.
If you want Kaspersky Security to ignore actions that were performed by malware in the operating system, clear the Roll back malware actions during disinfection check box.