Trouble Using Downloader with Norton Security Suite installed

[BCVolkert]

Hi Paul,

I tried to update PayWindow using the downloader and was prevented from doing so by Norton Security Suite. This happened on one machine (P2); but not on a second (V7).

Using the update sequence when the program opens, and
Using the "PayWindow Download Assistant" at Zpay.com


i suspect that is a false negative because I don't get any complaints from Norton when I download the program using the link at ZPay.com "2018 Payroll System Download". So, this is no longer a problem for me; but, I suspect it might be a problem for others. It seems to only be a problem using the Downloader.

When I tried using either of the approaches above that uses the Downloader, Norton blocks the execution and displays the following information:

"PayWinDownloader.exe is safe" with a green check mark for a minute or so, then
"paywindownloader.exe is not safe and has been removed." with a red "X".
I tried it with and without enabling Smart Firewall and Auto-Protect in Norton without any change in behaviour.
I have not uninstalled Norton.
The downloader works to update Tax Tables (today). So, that is strange.
Behaviour is the same using Internet Explorer and Chrome. I think I also tried it with Opera.
From the Norton Security Log, I can get to a dialog box titled "File Insight" where I get the following:


Filename: paywindownloader.exe

Full Path: c:\users\office manager\appdata\local\microsoft\windows\temporary internet files\content.ie5\55v8z814\paywindownloader.exe




Developers

ZPAY Payroll Systems, Inc.




Version

1.0.7.1




Identified

1/24/2018 at 9:10:16 PM




Last Used

Not Available




Startup Item

No




Few Users

Hundreds of users in the Norton Community have used this file.




Mature

This file was released 2 years ago.




Bad

There are many indications that this file is untrustworthy.




http://zpay.com/downloads/PayWinDownloader.exe

Downloaded File paywindownloader.exe from zpay.com


File Thumbprint - SHA:

4adc031af9ebfb783bec4f0579a6672e24a6639eee052f60c7 f714a1ef890243

File Thumbprint - MD5:

94452c18661fe7104f4a704f4e9c2e64

One other bit of wierdness exists. I had the trouble on a machine I call P2. To determine if it was the machine or the software, I tried it on another machine (V7) that is also running Norton Security Suites and did NOT have the problem on V7. (Do you hear the theme from The Twilight Zone about now?)

Let me know if I can beta test a fix for you or provide any additional details.

Bruce

[Paul Mayer]

The PayWinDownloader.exe is created with a tool called GetRightToGo and was originally created for slow Internet connections as it would insure that the entire setup program was downloaded and launched. What I happening is that there are these lowlifes out there that are using GetRightToGo to create programs that trick computer users to install Trojans and Viruses on their computers.

The Antivirus companies pick a hexadecimal piece of code in those apps to check for and here we are now, false triggers for our download helper. We are going to drop using the helper in the next release since almost everyone is on a good clean high speed connection now days. That will fix the problem going forward.

[BCVolkert]

Thanks Paul,

I was hoping there would be an explanation. It sounds like you are on the way to a fix. Your explanation might also explain why I had the problem on the computer with a slower speed connection. The next program update should tell the tale.

Excellent customer service (as always).

Bruce