they are not sending virus, but they are sending a malware or mostly an adware.
they do get paid from advertiser by sending a spyware and malware.
It's complicated but you can see that if you got a malware from PPI program, your computer sometimes open some site suddenly