Firewall getting AV messages and false positive?

Comodo Internet Security - CIS Firewall Help - CIS
#1

I have Comodo Personal Firewall installed, 10.0.1.6223. That is it. Yet, when I launched a game today (Portal Knights) is claims there is malware and blocks it from running.

2017-05-28 18:35:44 D:\Steam\steamapps\common\Portal Knights\portal_knights_x64.exe ApplicUnwnt.UnclassifiedMalware[at]1 Block Success

As far as I am aware, I only have the Firewall installed. I use Kaspersky AV and Malwarebytes for my Anti-virus and Anti-malware, so I have no idea why my firewall is reporting a malware/virus.

I can’t find any way to stop it. I even turned off the VirusScope and all other boxes in the Advanced Protection tab. HIPS has been disabled since I install Comodo.

Any way to stop this detection or add an exception to the list?

Update:

Found it finally. On Comodo Firewall menu, upper left corner, click “Tasks”. Then “Unblock Applications” in the lower left. Either search or click the “Blocked By” button to find the Antivirus one and find the program.

Still, if anyone know a way to turn this feature off completely, let me know. I already have an AV program running. Don’t need another.

#2

in the advanced settings go to file rating and try deselecting “analyze unknown files in the cloud by uploading them for instant analysis.”

EDIT: and if the above step works, I would reenable the settings in the advanced protection tab. on a side note if you are using KAV which has system watcher you should turn off virusscope due to possible conflict between two behavior detection systems. and malwarebytes anti-exploit component is not compatible with CF just in case you did not know, and KAV also has an anti-exploit system. if you run into stability issues with the system or any of those programs it’s probably a conflict between those applications, comodo is NOT intended to be run with third party apps.

if above doesn’t work disable cloud lookup.

#3

Disable ‘Detect potentially unwanted applications’ in file rating settings. You should also report false-positive here.