Comment by sloshnmosh

The software being used to push this malware is from Propeller ads and more recently AdMaven but is protected by Russian DDoS services.