The malware is probably using our add-on ID

    [email protected]

and may have a filename such as that, but may not be called Ad Limiter. Google searches for that ID are not turning up anything other than our own stuff.