No, you can write software that is malware in Java and package it as a jar, or make the legitimate software inside the jar install malware, and none of this would be detectable by a virus scan, if you think ACE is malware why don't you try to find a user who has complained of such a thing instead of speculating?