unless its defense +, your best bet would be to attached all your logs antivirus tab -> view antivirus event, firewall tab -> view firewall events, defense + tab -> view defense + events.
It was the defense +, i can't believe i missed it trough all this hours... it was before my eyes and still missed it.
Though interesting thing is that i added it several times to trusted files but it still stayed blocked in the defense+ ... maybe that would be a fix in future? that if you put it in the trusted files then it automaticly go away from the blocked files? because it aint make sense if it's both blocked and trusted same time.