Self-Renewing 'Automation' virus redirects Safari and Chrome through ads to bing. Renews through a memory alert
I wouldn't disable SIP if you have active malware on your system. If you have another Mac you can use or borrow, I'd boot your Mac into Target Disk Mode, connect it to the other Mac with a Thunderbolt cable, and then run both Avira and Malwarebytes on it from the other Mac. This allows the antimalware software to ignore any SIP protection on the TDM'd Mac and perform a full clean.

If you can't use another Mac, then install a bootable copy of macOS onto an external drive, boot from that, and do the same.

If you can't do either, boot into Safe Mode, run Avira, and then if it finds something, let it clean it and then reboot again into Safe Mode. Now run Malwarebytes and do the same. Always reboot after a pass where it found something, because whatever it is that it found may be preventing you from finding anything further until you reboot with it gone.