Windows 10: Offline scan not sure if everything is right and unverified signatures on autorun

I think im being paranoid but I saw bitdefender block some malware and I ran some scans to make sure it got it all, hitmanpro, bitdefender, eset online, and an offline defender scan most recently. Nothing was found in any scans but I just want to make sure because Autoruns is showing some weird results to me and im not sure if ive been infected or just have malformed signatures or something. I can post the logs from the recent offline scan and results from "Get-MpPreference" and "Get-MPComputerStatus" as well as what my autorun looks like and if it looks suspicious i can get the links for the

:)

 

some deleted dlls and unverified windows process from autorun

I don't think there's any malware. All the unverified entries are ones commonly seen in Autoruns as unverified.

The EPP entries are the Windows Defender shell extension.

• Go to C:\Program Files\Windows Defender\shellext.dll
  
• Right click shellext.dll and select Properties -> Digital Signatures
  
• Click on the entry listed -> Details
  

What does it say about the digital signature?

If there's any problem, running sfc /scannow from an admin Command Prompt or Powershell will replace it with a good copy.

~~~

The PLUGScheduler entry is usual for Windows 10.

Check the digital signature as above.

Open Windows Powershell and run: (Get-FileHash "C:\Program Files\RUXIM\PLUGScheduler.exe" -Algorithm SHA256).Hash

Post the hash.

~~~

Same for C:\Program Files\Windows Media Player\wmpnscfg.exe

Post the hash: (Get-FileHash "C:\Program Files\Windows Media Player\wmpnscfg.exe" -Algorithm SHA256).Hash

 

Why does Microsoft Autoruns say that I have 3-5 unverified Microsoft entries?

When I reinstalled windows 11. I wanted to see if my malware was gone by using autoruns. Autoruns says that 3-5 microsoft entries were unverified. I thought I had to reinstall windows 11 again ,but it didn't work. I read about unverified microsoft entries and they say to reinstall windows to fix it. Is this ok and how to fix this?

 

How can I remove this virus remnant?

I was also going to suggest Autoruns.

Check to make sure it isn't attaching itself to explorer. It should be the 3rd thing listed in Autoruns, the listing for the Shell. It should just be Explorer.exe. If it is anything else, that might be your problem.