We are having major problems with Webroot WebThreat extension and have decided to no longer use it.
I created a test group to go through the remove process. The group policy has WebThreat turned off.
All devices in the group have the Webroot client saying the Web Threat shield is turned off. Annoying the client is saying a warning that it is disabled.
I reboot a device, and the extension is still installed.
I uninstall webroot, and the extension is still there.
I run the following script I made:
#!/bin/bash
sudo /usr/libexec/PlistBuddy -c 'Delete :ExtensionInstallForcelist' /Library/Managed\ Preferences/com.google.Chrome.plist
sudo /usr/libexec/PlistBuddy -c 'Delete :ExtensionInstallForcelist' /Library/Managed\ Preferences/*/com.google.Chrome.plist
sudo /usr/libexec/PlistBuddy -c 'Add :ExtensionInstallBlacklist array' /Library/Managed\ Preferences/com.google.Chrome.plist
sudo /usr/libexec/PlistBuddy -c 'Add :ExtensionInstallBlacklist:0 string kjeghcllfecehndceplomkocgfbklffd' /Library/Managed\ Preferences/com.google.Chrome.plist
sudo /usr/libexec/PlistBuddy -c 'Add :ExtensionInstallBlacklist array' /Library/Managed\ Preferences/*/com.google.Chrome.plist
sudo /usr/libexec/PlistBuddy -c 'Add :ExtensionInstallBlacklist:0 string kjeghcllfecehndceplomkocgfbklffd' /Library/Managed\ Preferences/*/com.google.Chrome.plist
sudo rm -rf /Users/*/Library/Application\ Support/Google/Chrome/Profile\ */Extensions/kjeghcllfecehndceplomkocgfbklffd
And the extension is removed, and after a few seconds, it gets installed back. This behavior occurs whether webroot is installed or not.
Does everyone have an idea of what Webroot is using to install the Web Threat Shield? Any ideas would be helpful.