Keep seeing the same tracker, even right after fixing!

[Spybot_guy]

I run spybot and come up with an MS Directinput flag, it says it's a tracker and that it changed my registry. So I hit "Fix Selected" and think everything is fixed, yet if I run spybot immediately after fixing the selected malware the same malware is detected. Below is a sample of what I'm talking about and you can see I ran it twice and the same malware pops up. How do I get rid of this?

[i] 17-06-01 09:24:58
[i] 17-06-01 09:24:58 Product MS DirectInput
[+] 17-06-01 09:24:58 Moving into quarantine HKEY_USERS\S-1-5-21-1847927646-1894615489-993830242-1003\Software\Microsoft\DirectInput\MostRecentApplication\Name
[+] 17-06-01 09:24:58 Moving into quarantine HKEY_USERS\S-1-5-21-1847927646-1894615489-993830242-1003\Software\Microsoft\DirectInput\MostRecentApplication\Id
[+] 17-06-01 09:24:59 Successfully cleaned HKEY_USERS\S-1-5-21-1847927646-1894615489-993830242-1003\Software\Microsoft\DirectInput\MostRecentApplication\Name
[+] 17-06-01 09:24:59 Successfully cleaned HKEY_USERS\S-1-5-21-1847927646-1894615489-993830242-1003\Software\Microsoft\DirectInput\MostRecentApplication\Id
[i] 17-06-01 09:24:59
[i] 17-06-01 09:24:59 Product Cache
[+] 17-06-01 09:24:59 Moving into quarantine Internet Explorer (User) (Me)Cache
[+] 17-06-01 09:24:59 Successfully cleaned Internet Explorer (User) (Me)Cache
[i] 17-06-01 09:24:59
[i] 17-06-01 09:24:59 Product Cookie
[+] 17-06-01 09:24:59 Moving into quarantine Firefox (Me (default))Cookies
[+] 17-06-01 09:24:59 Moving into quarantine Thunderbird (Me (default))Cookies
[+] 17-06-01 09:24:59 Successfully cleaned Firefox (Me (default))Cookies
[+] 17-06-01 09:24:59 Successfully cleaned Thunderbird (Me (default))Cookies
[i] 17-06-01 09:24:59
[i] 17-06-01 09:24:59 Summary
[i] 17-06-01 09:24:59 Errors while cleaning 0
[i] 17-06-01 09:24:59 Files moved into quarantine 5
[i] 17-06-01 09:24:59 Files successfully cleaned 5

[tashi]

Hello Spybot_guy,

MS DirectInput (https://msdn.microsoft.com/en-us/library/windows/desktop/ee418998(v=vs.85).aspx), is Spybot flagging it as a green detection?

Which version of Spybot (https://www.safer-networking.org/private/) do you have and what is the operating system please.

Best regards.

[Spybot_guy]

Hello Spybot_guy,

MS DirectInput (https://msdn.microsoft.com/en-us/library/windows/desktop/ee418998(v=vs.85).aspx), is Spybot flagging it as a green detection?

Which version of Spybot (https://www.safer-networking.org/private/) do you have and what is the operating system please.

Best regards.


You must mean the threat level bar...yes it is green.

I have Spybot Home 2.5 and I'm running windows 10 64 bit.

[tashi]

Hello Spybot_guy,

A green detection is not malware. Program updates will cause a registry change.

From the link (https://msdn.microsoft.com/en-us/library/windows/desktop/ee418998(v=vs.85).aspx) in my previous post;

"Each DirectInputDevice object represents one input device, such as a mouse, keyboard, or joystick. In the DirectInput API, the word joystick means any type of input device other than a mouse or keyboard. A piece of hardware that is really a combination of different types of input devices, such as a keyboard with a touchpad, can be represented by two or more DirectInputDevice objects."

Are you using the computer for gaming?

Best regards.

[Spybot_guy]

Ahhh...ok....thank you! I didn't fully understand what was being said in the link you posted as it pertained to my spybot detection.


Yes...this computer was built primarily for gaming.


Thank you for your response tashi!