Earthlink Search Re...
 
Notifications
Clear all

Earthlink Search Records

4 Posts
2 Users
0 Reactions
1,346 Views
(@twjolson)
Honorable Member
Joined: 18 years ago
Posts: 417
Topic starter   [#8998]

I have a bunch of internet records in unallocated. They are most definitely not IE, Chrome, or Firefox. There are many URLs tied to search.earthlink.net/search?, but many other pages as well as cached (though I can't find them) images. They are in the form of

19 050319012125 port 8080/2386 http//search.earthlink.net/search?area=earthlink-ws&q=?+overture+monitor+five+bids+NZ20041109A
Does anyone know what these may be from? Obviously, it's from an earthlink program. Maybe a toolbar, but I can find no corroborating evidence.

Additionally, there are tons of these searches for 'overture monitor five bids NZ20041109A'. Anyone know the source of those? Researching online only shows other users wondering what the cause is as well. There are references to Yahoo Toolbar (which they have in this image), but that seems an odd thing to have the program to search for. The only other thing that comes to mind is malware, of which there is, but that seems odd as well.

Any thoughts.



   
Quote
jhup
 jhup
(@jhup)
Noble Member
Joined: 17 years ago
Posts: 1442
 

Search for NZ20041109A, and related discussions. Something to do with an odd version of IE7.



   
ReplyQuote
(@twjolson)
Honorable Member
Joined: 18 years ago
Posts: 417
Topic starter  

I saw that. Overture is a Yahoo ad arm. But, why the monitor five bids NZ20041109A? Why would an ad company periodically do searches?

Anything on the internet history artifact?



   
ReplyQuote
(@twjolson)
Honorable Member
Joined: 18 years ago
Posts: 417
Topic starter  

Ok, I got an answer. I post it on the off-chance that someone else runs into the same artifacts in the future.

My theory was that Earthlink Accelerator created the artifacts. As it downloads files, it logs them to a file in the Program Files\EarthLink Accelerator\logs directory.

They are in the format of [record number] [timestamp] port [proxy port] <a rel="nofollow" href=".

A great big thank you goes out to Earthlink and Propel for being invaluable resources, helping me get time-relevant executables to run the tests on.">.

A great big thank you goes out to Earthlink and Propel for being invaluable resources, helping me get time-relevant executables to run the tests on.



   
ReplyQuote
Share: