1.    07 Aug 2017 #1
    Join Date : Dec 2016
    Posts : 6
    Windows 10 Home x64

    My VirusTotal page looks different, browser hijacked?


    Was surfing the web. Scanned a Zip file at VT, said it was OK.
    Downloaded it.
    Before extracting, scanned with Defender and MBAM, both said clean.
    Extracted & re-scanned again Defender & MBAM said clean.
    Opened a new browser to scan extracted folder on VT.
    UM.. the VT home page is totally different?

    See pics.

    My normal Click image for larger version. 

Name:	real VT page.jpg 
Views:	3 
Size:	157.9 KB 
ID:	147596
    (I had first VT scan still open)


    Hijacked ? Click image for larger version. 

Name:	hijacked VT page.jpg 
Views:	2 
Size:	143.4 KB 
ID:	147595
    (also changed toolbar icon for both )

    FWIW :Toolbar addy didnt change still (https :// www virustotal com/)


    This doesn't look right. Did I just get hijacked?
    Please help.
      My ComputerSystem Spec
  2.    07 Aug 2017 #2
    Join Date : Jul 2016
    Crewe Cheshire
    Posts : 1,451
    windows 10

    It looks like a simple home page change you should just be able to set your own home page
      My ComputerSystem Spec
  3.    07 Aug 2017 #3
    Join Date : Dec 2016
    Posts : 6
    Windows 10 Home x64
    Thread Starter

    Quote Originally Posted by Samuria View Post
    It looks like a simple home page change you should just be able to set your own home page
    Thanks for reply, VT is not my browser home page. I don't think I explained it well, let my try again.

    My toolbar bookmark for VirusTotal address is https :// www . virustotal . com/ .

    I opened a browser window(first) & using the toolbar bookmark went to VirusTotal. The VT page looked like it normally does (first pic) and the https :// www . virustotal . com, matches my bookmark.

    Then I scanned a file (came up clean) & left that browser open.
    I downloaded and extracted that file.

    I opened a new (second) browser window & using the toolbar bookmark went to VirusTotal (in the second browser window), however the VT page looked totally different (second pic).

    Beside the visual change between the two browser window's I noticed the following.

    The web address on the (second) browser automatically changed to "https :// www . virustotal . com/#/home/upload".
    The "Icon" of the toolbar bookmark for both browser windows changed.
    My toolbar bookmark address has not changed.
    If Google VirusTotal & follow that link I get the page like my first pic.

    Thoughts?
      My ComputerSystem Spec
  4.    07 Aug 2017 #4
    Join Date : Nov 2016
    Posts : 422
    Windows 10

    The first one seems to be just an old version. Keep refreshing the first one and you eventually get the newer version.

    You maybe have not cleared your cache, or not re-done Favourites/Bookmarks links recently.
    I get the same thing on 3 different Browsers.

    Quite right to be suspicious.
      My ComputerSystem Spec
  5.    07 Aug 2017 #5
    Join Date : Jul 2015
    Posts : 182
    win 10 home

    Might it be a function of having two different (but same) browser processes running, versus two different windows of the same browser process running?

    If you were to open a new tab in each browser window and click on the Virus Total bookmark, what would be the result(s)?

    I am curious about the ZIP file. On the one hand, you are (overly?) cautious by doing so much scanning of it. On the other hand, you're not offering its name and link for possible peer-reviewing via sandboxing.
      My ComputerSystem Spec
  6.    23 Aug 2017 #6
    Join Date : Dec 2016
    Posts : 6
    Windows 10 Home x64
    Thread Starter

    SOLVED & question on peer review


    Quote Originally Posted by pyramid10 View Post
    Might it be a function of having two different (but same) browser processes running, versus two different windows of the same browser process running?

    If you were to open a new tab in each browser window and click on the Virus Total bookmark, what would be the result(s)?

    I am curious about the ZIP file. On the one hand, you are (overly?) cautious by doing so much scanning of it. On the other hand, you're not offering its name and link for possible peer-reviewing via sandboxing.
    Sorry, thought I replied & marked this as solved.
    I'm going with what Pyramid said about multiple browsers. After I cleaned everything, shut down & restarted, it was back to normal.

    Pyramid,
    Yes I am overly cautious (some might even say.. paranoid).
    I did not know I could offer something for peer-reviewing.
    For future reference how would I do so?

    Again,
    Many Thanks.
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
VirusTotal Is Getting a New UI
139748 Read the rest here: VirusTotal Is Getting a New UI Link to Virus Total: VirusTotal
AntiVirus, Firewalls and System Security
Solved search.searchlf.com/polarity has hijacked my FireFox browser
I downloaded an app and search.searchlf.com took over as my browser I went to my installed programs, it shows nothing installed the night it happened. Where could it be hiding on my computer, and under what other names? I also checked the registry...
AntiVirus, Firewalls and System Security
Solved Chrome Browser Page Loading Errors
I have used Chrome for a number of years now with no issues. But last night an issue popped up and I'm not sure what I need to do to try to fix it. When I go to a new page it only halfway loads. I have to refresh in order for it to fully load. You...
Browsers and Email
Solved Edge Browser Hijacked by MPC Safe Navigation - search MPC
Edge Browser Hijacked by MPC Safe Navigation - search MPC. I tried a few of the suggestions for removal I found on-line. Most ask me to check "services" or "background service" but I could not find the program anywhere. Apparently it does have it's...
Browsers and Email
java update hijacked edge browser
A older java update has hijacked my edge browser and I cant get rid of the page asking to update.
Browsers and Email
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 23:19.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums