It doesn't, Norton is well known for having false-positives on powder toy. Just ensure that you downloaded the one from this website. It's also open source, you can feel free to compile it yourself.
@anfish(View Post) So many advertising. @jack-awesome(View Post) Norton is one of the worst antiviruses imho. If you've got legit Windows Vista/7, use MSE. Powder is not a virus.
antiviruses recognise it as a virus because it really can run malware. it has both execution functions and downloading functions. eg tpt.getscript compines them both Since antivirus doesnt know what does server return, it thiks about the worst