Spyware/Ad/Popup code discovered in Kayaman Java Chat pg used by MusicCity. & Xolox?

**Tony C.** · 10-11-2010, 03:48 AM

Ever go to the Music City Morpheus chat and get barraged by popup ads? Well, it happens there was popup ad code embedded into the Java Chat. Turns out it was put in there by a user named--> Kayaman. lol. And all this time he was getting ad clicks.

Here's the info:

You know how when you went to http://chat.musiccity.com that all these annoying popup ads came up in your face? For things like cellphones and whatnot...

Well upon tracking the source of these ads, it turns out that the chat page opened several session connections to the IP of www.popuptraffic.com, also media.popuptraffic.com. This turns out to be a notorious popup ad/spam site that is on many spam 'BlackLists' including anti-spam sites that supply lists of sites to block out in your HOSTS file. (see http://www.smartin-designs.com for how to block ad/popup/spam sites )

So ok, I thought musiccity morpheus was doing it. Nope.

MusicCity's Morpheus chat was admin'd by a person named Kayaman who recently also started a competing chat server called p2pchat.org. p2pchat.org was supposed to be the spillover chat where people could chat about various p2p clients and touted as being against spyware. It is also home of chat rooms for p2p clients such as xolox, a simple gnutella p2p program. And is populated by many ops from the Morpheus chat.

Well, The music city chat server has been rumored to be shutting down for a while now, but a few hours ago it just happened.

The morpheus chat just changed, morpheus chat is now gone, and users are now routed to p2pchat.org. That's how the spyware in the java chat revealed itself. Here's how...

For the switchover, the Webmaster ConferenceRoom java chat was replaced by Kayaman's own JAVA CHAT. Inspecting the code put there, revealed it. Right clicking on the page you can VIEW the SOURCE CODE. And hidden in the source code of the page was this:

<SCRIPT LANGUAGE="JavaScript" src="http://www.popuptraffic.com/assign.php?l=kayaman&mode=behind">

<SCRIPT LANGUAGE="JavaScript" src="http://www.popuptraffic.com/assign.php?l=kayaman"></script>

If you don't know what that means, that is the code that spews those cellphone popup ads from popuptraffic.com in your face when you go to morpheus chat. But look at the end... Notice it doesn't say MusicCity at the end. It says 'l=kayaman'. It turns out that Kayaman put *himself* as the affiliate. --So all this time, while touting NoSpyware and ad free systems, he was secretly getting ad impression credits from you. LOL.

By the way, I looked for the user and tried to contact them in the chat server, but upon getting no answer I posted the spyware info into the chat rooms to tell everyone. Upon Kayaman seeing it in the chat room, I was killed off the server with the following message:

*** You were killed by KayaMan (irc2!netadmin.p2pchat.org!KayaMan (learn the difference between a popup and spyware))

LOL.

-Notice that it doesn't say "No. There's nothing there." but rather he seems to be admitting it and just arguing whether or not it's popups or spyware. In any case, you can argue over definitions if you like, but I'd say anything that is hidden code and is embedded secretly, pops up ads at you, and directs revenue credits to someone is not too good no matter what term you want to use for it.

By the way, Kayaman says he is NOT an employee of music city. Although he does administer their chat and have the keys to edit and manipulate their website to add his own name in there for revenue credits, and direct people to his new p2pchat server.

Whether or not someone deserves or does not deserve ad revenue, the fact that it was hidden and designed to launch popup ads by someone who at all other times was vocal against such things is a little questionable.

As soon as I revealed the popup ad code and that the credit was going to Kayaman, the site was quickly edited to prohibit RIGHT-CLICKING to view the source code, and the ad code was edited out. LOL!

But here is what it was:

<HTML><HEAD>
&lttitle>. . MusicCity - Java Client . .</title&gt
&;ymeta http-equiv="content-type" content="text/html; charset=iso-8859-1" /zzzzzzzzzzzzzzzzzzzz>
>meta http-equiv="Content-Language" content="en-us" />
>meta name="robots" content="none" /<

>SCRIPT LANGUAGE="JavaScript"
src="http://www.popuptraffic.com/assign.php?l=kayaman&mode=behind">
</script>
<SCRIPT LANGUAGE="JavaScript" src="http://www.popuptraffic.com/assign.php?l=kayaman"></script>

</HEAD>

<body class=background bgcolor="#FFFFFF" text="#828282"
link="#669999" vlink="#669999" topmargin="1" >
<script language=JavaScript>

</script>
<center>
<****** border=0 height=450 FRAMEBORDER="0" width=665
MARGINHEIGHT=0 MARGINWIDTH=0 SCROLLING=Yes
NORESIZE scrolling=no src="http://www.p2pchat.org/mchat.htm"></******&gt
<center>
</body>
</html>

And here's how the code appears on the chat page...

****

Hmmm, Kayaman also has XOLOX using his java chat code. I wonder what kind of stuff is in now embedded in XOLOX chat... ?

-Helen Brocke

[edit note: this post contained HTML code which caused pop ups, this is a sort of spamming]

**Luchea** · 10-11-2010, 06:26 AM

I think you must have been to http://www.xolox.com first and got infected there. They aren't affiliated with http://www.xolox.nl

**jonlord44** · 10-11-2010, 12:27 PM

Brocke,
You spend your days spamming IRC channels and we allowed you to, for I also agreed the current Morpheus dropped the ball. But to come in and accuse me of spyware? Please, grow up and make the arguement with me rather then try to make a name for yourself spamming rooms where of course, you would get killed if you egg on people enough.
It comes with the territory , the rumors. So im not surprised one bit to see this post.

**ali usman** · 10-11-2010, 08:00 PM

You are right, the spyware was not installed by the link at xolox.nl.
Sorry.

**gatorbite3210** · 10-11-2010, 10:12 PM

I didnt even read your full post, so I will completely answer it. The disable right click has always been there, for over a year to avoid people taking the code - no biggie.
Secondly , I never go around claiming what you say, so please don't put words in my mouth. Its a known fact clients make money through ad revenue which isn't a problem - I have and always will be against spyware and installing of software without user's knowledge.
We have debated and discussed in the past, funny you would take your quarrels to this. So basically if you go in bad mouthing a network and trolling it to see who you can p.i.s.s off and get disconnected you can come to a forum to make the person look bad. Its quite alright , I'll take a step back and let those that know me decide for themselves.

Lastly ( because that was a long post he/she posted )

You are talking about a popup ad , this site itself poped up 3 to 4 ads so now gnutellaforums is a bad place?

"I wonder what kind of stuff is in now embedded in XOLOX chat... ?"

I think the people using it are clever enough to not fall for your attempt at a personal attack on me to think XoloX has anything or ever would to do with that. Just because someone helps keep chat up, doesn't mean they are an employee of your much hated Morpheus; which you spend half your day spamming about how awful it is. Right on , but please don't confuse the 2.

**Kim T** · 10-12-2010, 03:05 AM

Dear XoloX and forum users,

Unlike what the posting suggests, XoloX is absolutely Spyware free! The trust of our users is priceless and we would never do anything to jeopardize it.

If any one chooses to fight vendettas, please pick a different arena.

Team XoloX

**ReGgAe TiCo MaN** · 10-12-2010, 11:15 AM

And you suggest we should just believe you, sweet Susie?

**thethinker234** · 10-12-2010, 08:17 PM

well team xolox took over xolox.com now, so it shouldn't happen to lost users anymore. the site WAS owned by some asian company.

**Codyman** · 10-13-2010, 08:29 AM

Yes you should, until you have an official release and can prove that he is lying! The betas are clean!

Note that the unregistered is talking about music city not Xolox!

Morgwen

**Megan W** · 10-13-2010, 01:34 PM

USE AD-AWARE FIRST!!! Then come and complain.

I installed AOL for a friend and SPAM EVERYWHERE!!!
Took me a long time to get rid of it all. every time I logged to the net pop ups everywhere!!!

AOL SUCKS, get a real ISP and quit being such a looser computer idiot.

Welcome to Discuss Everything Forums...

Tags for this Thread

Thread: Spyware/Ad/Popup code discovered in Kayaman Java Chat pg used by MusicCity. & Xolox?

Thread Tools

Rate This Thread

Display