My VirusTotal page looks different, browser hijacked?

Was surfing the web. Scanned a Zip file at VT, said it was OK.
Downloaded it.
Before extracting, scanned with Defender and MBAM, both said clean.
Extracted & re-scanned again Defender & MBAM said clean.
Opened a new browser to scan extracted folder on VT.
UM.. the VT home page is totally different?

See pics.

My normal
(I had first VT scan still open)


Hijacked ?
(also changed toolbar icon for both )

FWIW :Toolbar addy didnt change still (https :// www virustotal com/)


This doesn't look right. Did I just get hijacked?
Please help.

It looks like a simple home page change you should just be able to set your own home page

Samuria said:

It looks like a simple home page change you should just be able to set your own home page

Thanks for reply, VT is not my browser home page. I don't think I explained it well, let my try again.

My toolbar bookmark for VirusTotal address is https :// www . virustotal . com/ .

I opened a browser window(first) & using the toolbar bookmark went to VirusTotal. The VT page looked like it normally does (first pic) and the https :// www . virustotal . com, matches my bookmark.

Then I scanned a file (came up clean) & left that browser open.
I downloaded and extracted that file.

I opened a new (second) browser window & using the toolbar bookmark went to VirusTotal (in the second browser window), however the VT page looked totally different (second pic).

Beside the visual change between the two browser window's I noticed the following.

The web address on the (second) browser automatically changed to "https :// www . virustotal . com/#/home/upload".
The "Icon" of the toolbar bookmark for both browser windows changed.
My toolbar bookmark address has not changed.
If Google VirusTotal & follow that link I get the page like my first pic.

Thoughts?

The first one seems to be just an old version. Keep refreshing the first one and you eventually get the newer version.

You maybe have not cleared your cache, or not re-done Favourites/Bookmarks links recently.
I get the same thing on 3 different Browsers.

Quite right to be suspicious.

Might it be a function of having two different (but same) browser processes running, versus two different windows of the same browser process running?

If you were to open a new tab in each browser window and click on the Virus Total bookmark, what would be the result(s)?

I am curious about the ZIP file. On the one hand, you are (overly?) cautious by doing so much scanning of it. On the other hand, you're not offering its name and link for possible peer-reviewing via sandboxing.

pyramid10 said:

Might it be a function of having two different (but same) browser processes running, versus two different windows of the same browser process running?

If you were to open a new tab in each browser window and click on the Virus Total bookmark, what would be the result(s)?

I am curious about the ZIP file. On the one hand, you are (overly?) cautious by doing so much scanning of it. On the other hand, you're not offering its name and link for possible peer-reviewing via sandboxing.

Sorry, thought I replied & marked this as solved.
I'm going with what Pyramid said about multiple browsers. After I cleaned everything, shut down & restarted, it was back to normal.

Pyramid,
Yes I am overly cautious (some might even say.. paranoid).
I did not know I could offer something for peer-reviewing.
For future reference how would I do so?

Again,
Many Thanks.