Unfortunately whoever is doing this is constantly updating the jar file.

The latest version of it isn't detected by any virus scanners.

(Indeed I would bet that they're using virustotal.com to verify their changes worked :/ )