Some Antivirus products have started detecting unmodified Tor executable as a Virus in response to this botnet: https://www.virustotal.com/en/file/94fe0e8a61c506fba45d14571a14dc259e1d52778cef8366ce8cbdcd871e28db/analysis/1378462188/