My Safari browser has been hijacked

There are a few different, yet similar things that can re-direct your Safari (and chrome) browser.

How to remove Chumsearch from Safari

• How To Remove ChumSearch.com redirect from Mac (macOS Guide)

Ideas on how to remove these include a manual method; along with other items to try with

some valid results. IF the 'chumsearch' has screen image such as user posted, that may not

be too bad; some get more than one redirect, such as 'bing' or yet another. Safari extensions

can give you a clue; also if your home page has been changed, that too is another symptom.

This (post) includes manual cure for 'Bing' re-direct, because earlier in question includes two +

symptomatic 'redirect' malware: Re: Chrome and Safari replaced by generic "search" broswer

Also links to get helpful tools (downloads: etrecheck & malwarebytes/mac) are in same thread.

IF your system has Bing, the instructions (free use only) can be helpful for manual removal.

{Bing tries to appear as 'an original search' engine, but it's not. It's a fake.}

These are included in above link, posted in "Re: Chrome and Safari..." worth checking into:

https://www.2-spyware.com/remove-bing-redirect-virus.html

and this, too: How to get rid of Bing.com Redirect - Virus removal guide

If you do try & 'reset' computer, be sure to not use backups from after you encounter these

re-directs; as they can re-contaminate the new system install ~ from the archived bad bits.

I advise learn how to remove them, avoid their source, and maintain a new clone of the main

macOS on external HD. You may have to invest in suitable hardware for backup boot-clones.

I found an answer that worked for me on Twitter, of all places. The virus created a bookmark, and was set to open new windows to that bookmark. Here's the link that fixed it for me today (after untold wasted hours) https://twitter.com/thomasareed/status/1035588357609467905

Hope that helps.

T. Reed is the author of and creator of the mac version malwarebytes for mac.

There are manual methods of determining the elements of the 'non-existent

viri' (there is no virus involved) and then remove those items placed by user

who visited sites with untoward content on them. Thus self-introducing them.

Glad you see Thomas R's other contribution that answered your question.

The re-direct element of this is what makes it harder for novice to remove.

And a few variants in the 'underlying source' can add confusion, too.