Member Avatar for z3r0

I'm seriously worried because spybot Sd found Roboform spyware. I use it and payed mi license of Roboform...
is that really spyware?

Heres what SPybot SD says:

AI Roboform: Class ID (Registry key, nothing done)
HKEY_USERS\S-1-5-21-73586283-1645522239-725345543-1003\Software\Classes\CLSID\{724d43a1-0d85-11d4-9908-00400523e39a}

AI Roboform: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{3AB6A2BE-5A44-11D3-ABEE-EAF45F643446}

AI Roboform: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{724d43a0-0d85-11d4-9908-00400523e39a}

AI Roboform: Root class (Registry key, nothing done)
HKEY_CLASSES_ROOT\RoboForm.BrowserHelper

AI Roboform: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{724d43a9-0d85-11d4-9908-00400523e39a}

AI Roboform: Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{724d43a9-0d85-11d4-9908-00400523e39a}

AI Roboform: Root class (Registry key, nothing done)
HKEY_CLASSES_ROOT\RoboForm.BrowserHelper.1

AI Roboform: Root class (Registry key, nothing done)
HKEY_CLASSES_ROOT\RoboForm.FormFiller

AI Roboform: Root class (Registry key, nothing done)
HKEY_CLASSES_ROOT\RoboForm.FormFiller.1

AI Roboform: Root class (Registry key, nothing done)
HKEY_CLASSES_ROOT\RoboForm.ToolBand

AI Roboform: Root class (Registry key, nothing done)
HKEY_CLASSES_ROOT\RoboForm.ToolBand.1

AI Roboform: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{BAAC3901-6642-11D3-ABEE-C5DBF3571F46}

AI Roboform: Uninstall settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-73586283-1645522239-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AI RoboForm

AI Roboform: Settings (Registry value, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\{724d43aa-0d85-11d4-9908-00400523e39a}

AI Roboform: Settings (Registry value, nothing done)
HKEY_USERS\S-1-5-21-73586283-1645522239-725345543-1003\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\{724d43aa-0d85-11d4-9908-00400523e39a}

AI Roboform: Settings (Registry value, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\{724d43aa-0d85-11d4-9908-00400523e39a}

AI Roboform: IE toolbar (Registry value, nothing done)
HKEY_USERS\S-1-5-21-73586283-1645522239-725345543-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{724D43A0-0D85-11D4-9908-00400523E39A}

AI Roboform: Settings (Registry value, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{724d43a0-0d85-11d4-9908-00400523e39a}

AI Roboform: Program directory (Directory, nothing done)
c:\My RoboForm Data\

AI Roboform: Program directory (Directory, nothing done)
C:\Archivos de programa\Siber Systems\

AI Roboform: File extension (Registry key, nothing done)
HKEY_CLASSES_ROOT\.rfb

AI Roboform: File extension (Registry key, nothing done)
HKEY_CLASSES_ROOT\.rfc

AI Roboform: File extension (Registry key, nothing done)
HKEY_CLASSES_ROOT\.rfn

AI Roboform: File extension (Registry key, nothing done)
HKEY_CLASSES_ROOT\.rfp

AI Roboform: File extension (Registry key, nothing done)
HKEY_CLASSES_ROOT\.rft

AI Roboform: File extension (Registry key, nothing done)
HKEY_CLASSES_ROOT\.rfx

AI Roboform: Root class (Registry key, nothing done)
HKEY_CLASSES_ROOT\RFB-File

AI Roboform: Root class (Registry key, nothing done)
HKEY_CLASSES_ROOT\RFC-File

AI Roboform: Root class (Registry key, nothing done)
HKEY_CLASSES_ROOT\RFN-File

AI Roboform: Root class (Registry key, nothing done)
HKEY_CLASSES_ROOT\RFP-File

AI Roboform: Root class (Registry key, nothing done)
HKEY_CLASSES_ROOT\RFT-File

AI Roboform: Root class (Registry key, nothing done)
HKEY_CLASSES_ROOT\RFX-File

  • 3 Contributors
  • 4 Replies
  • 228 Views
  • 1 Week Discussion Span
  • Latest Post Latest Post by crunchie

Dani AI

Generated

Quick expert summary for (and anyone else seeing the same Spybot hits): RoboForm is a legitimate password manager made by Siber Systems, and it integrates into browsers so it can save and fill logins — that integration is why Spybot reports registry/COM/BHO entries, not because RoboForm secretly phones home. (roboform.com)

Why Spybot shows those items: RoboForm installs a browser helper/toolbar component to hook pages and fill forms; anti‑spyware heuristics commonly flag BHOs and their registry/CLSID entries because the same technique can be used by malware. A CLSID lookup (what did) is a useful check, but it only tells you what component is registered, not whether the file on disk is the official, signed program. (devx.com)

Is RoboForm “spyware”? Not by the usual definition — it stores credentials encrypted under your Master Password and describes a zero‑knowledge, AES‑256 + PBKDF2 design for local storage. That makes it fundamentally different from software that stealthily exfiltrates data. Still, any password manager is only as safe as the device, the installer you used, and the secrecy of the Master Password. (roboform.com)

Practical verification checklist (quick, repeatable):

  • Confirm installer/source and publisher are genuine — get the installer from the official site and confirm the publisher claim.
  • Check the executable’s digital signature (right‑click → Properties → Digital Signatures) before running it. (dochub.com)
  • Scan the installer/exe or its SHA‑256 hash on a multi‑engine service (VirusTotal) to see whether multiple vendors flag it. (Avoid uploading highly sensitive files — hashes are safer.) (webasha.com)
  • If you downloaded from a third party or see unsigned/modified files, uninstall, download a fresh copy from the vendor, reinstall from a clean machine, then change critical passwords (and the master password if you suspect compromise). (roboform.com)

Bottom line: ’s CLSID check is a good start; ’s privacy concern is valid in principle — but the presence of BHOs/registry entries alone does not make paid RoboForm spyware. Follow the verification checklist above if there’s any doubt.

Recommended Answers

All 4 Replies

Member Avatar for crunchie

According to Computer Cops CLSID list, it comes up clean :).

Member Avatar for z3r0

According to Computer Cops CLSID list, it comes up clean :).

Thanks. How do you know if it's ok or not... I just saw the key, what does that means?

Member Avatar for alc6379

Maybe SpyBot picks up on RoboForm because it could be used to invade someone's privacy? Just a thought...

Member Avatar for crunchie

If a product is on their list it means they have done a thorough check-up of the file\program involved & mark it as malware or otherwise.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.