This program also uses aggressive techniques to protect itself from being removed by anti-malware programs. When the Antivirus Soft process is running it will close almost any running program while falsely stating that they are infected. Antivirus Soft will also change the Proxy settings in Internet Explorer so that you cannot browse to any web site other than the site for Antivirus Soft so that you can purchase the program. It does this so that you cannot browse the web to find removal guides or download software that will help you remove the infection. Using these two methods, the program essentially ransoms the normal use of your computer until you purchase the program or use the guide below to remove the infection.

When Antivirus7 is installed it will be set to start automatically when you login to Windows. Once started it will scan your computer and state that there are a variety of infections on your computer, but will not remove them until you first purchase the program. These infections are all fake, though, and the files it states are infected are actually legitimate Windows programs. Therefore please do not manually delete any of the files it states are infections as it may cause your Windows operating system to not operate properly.

When Antivirus Suite starts it will perform various functions in order to protect itself from being removed. First, it will configure your Internet Explorer and Windows Internet settings to use a proxy server. This proxy server will not allow you to update anti-malware programs or let you visit a variety of sites and will instead show a screen stating that the site you are visiting is harmful. This warning will state "Internet Explorer Warning - visiting this web site may harm your computer!" and then prompt you to purchase Antivirus Suite in order to protect yourself. The program will also not allow you to launch most applications other than those absolutely required for Windows or Antivirus Suite to run properly. When you attempt to launch other programs, Antivirus Suite will state that they are infected. It will then prompt you to purchase the rogue to repair the infection. These are just further scare tactics and should be ignored.