Skyjem and other browser hijacks not being picked up by ESET

[mrrossix 0]

Hi all

New to ESET so apologies if I'm missing something, but a scan is not finding anything wrong on my laptop.

However, I've got a browser hijack issue - usually re-directs to Skyjem but sometimes goes to uk.search or others. ESET is not finding this nor giving me the ability to remove it.

I've tried a ton of things to remove this, including everything here: https://malwaretips.com/blogs/skyjem/

Purchased ESET as per this recommendation but it's not helping - can it / should it help?

BTW, it's the "ESET HOME Security Essential"  edition I have.

thanks!!!

[Marcos 5,458]

The domain is detected as suspicious only by alphaMountain.ai:

https://www.virustotal.com/gui/url/aa746b78969f409099dfa74ab5e75b9c723da76f7f800ba621146ecd061b6243/detection

Currently I don't see any good reasons for blocking it.

[mrrossix 0]

Thanks - maybe it's not the correct domain / name for my problem but essentially I have a brower hijacker. Whenever I type anything in the search, be it in the URL field or into google, in Edge or Chrome, then it redirects several times, often going via skyjem, but lots of others too. 

So why isn't ESET picking up the browser hijacker / how do I remove this please?

[Marcos 5,458]

Please provide logs collected with ESET Log Collector and check your DNS settings on your router. You may need to reset your router settings to factory defaults.

[itman 1,804]

Per the malwarebytes.com removal article;

Quote

Skyjem.com is a search engine that is promoted through the use of malicious browser extensions and browser hijackers. When installed, these browser hijackers modify your web browser’s configuration to automatically send all searches through Skyjem.com.

When the Skyjem.com browser hijacker is installed on a computer, common symptoms include:

• Your browser’s search queries are redirected through Skyjem.com
• A malicious browser extension or program is installed on your compute

 

 

Edited November 14 by itman

[itman 1,804]

6 hours ago, Marcos said:

Currently I don't see any good reasons for blocking it.

It should be classified as a PUA: https://www.pcrisk.com/removal-guides/30429-skyjem-com-redirect .

[mrrossix 0]

Thanks for the responses; I took a closer look at my laptop and saw that the ESET browser extension wasn't enabled - I have enabled this and it seems to have resolved the issue.