Hi there. I am checking a laptop running Windows 7 Home Premium SP1 (in Spanish) that was infected with the ‘Police Virus’ - Trj-Ransom Ransomware. Via F8 and ‘Repair your computer’, I was able to run System Restore and get past the block and access Windows. Most things seemed to be back to normal but: - Panda Global Protection 2012 would not activate. It indicated that it needed to restart Windows in order to activate all the functions but returned each time to the same situation. Uninstalling and reinstalling of Panda did not change the situation. - Windows Update would not run because the WU service was not running. In fact, in Services, it did not even appear although the correct entries were present in the Registry. The owner of the laptop then explained that he had noticed the problem with Panda some time before the arrival of the Police Virus so it did seem to be a different malware that had installed itself earlier. I have run the processes indicated for Windows 7 in the Malware Removal Guide and TDSSKiller (using it’s default actions) removed Rootkit.Win32.Necurs.gen. Following completion of these processes, Windows Update works correctly and Panda GP2012 indicates that all components are functioning so all seems to be fine. However, I think there may still be some remains of malware that should be removed. I will attach the logs created and would be grateful if someone could review them. Thanks in advance for your help.