Why IBM Installation Manager 1.8.4.1 failing virus scan?

Answer

Researching further, scan output confirms "com.ibm.cic.agent.core_1.7.11.v20160129_1848.jar" is causing the issue and the following entry can be seen in the output.

Not scanned (The file is encrypted) C:\IBM Rational\IM1.8.4.1\Test\plugins\com.ibm.cic.agent.core_1.7.11.v20160129_1848.jar

This is a known Installation Manager issue for 1.8.4.1. The .jar file itself is not encrypted, but the .jar file contains some encrypted .zip files, under the win32 directory. They were unintentionally included in the plug-in, and have been removed and fixed in Installation Manager 1.8.5. Specifically, the plug-in should have excluded all children of the "win32" directory, excluding "cleanup.js" file.

We have tested it using the Symantec Scan Tool, which works fine. The issue seen by other virus scanner is a false alarm, and it is safe to add it in the exception, until Installation Manager 1.8.5 is released.

If customer cannot add it to the exception list in the virus scanner, we recommend them to use Installation Manager 1.8.3 or previous releases, which do not have this issue.