Java has discovered application components that could indicate a security concern

Here is where I went wrong, maybe you can benefit:

I had an icon.jar file and I needed to add one more icon so I just went and used winrar without thinking.

What you need to do is to use the jar command to wrap up the file:

JAVA_HOME\bin\jar cvf icnFileName.jar *.gif


Don't forget to resign the file.