Strange Defense+ Hueristic Alert

I received an alert from Comodo when I tried to download a portion of Symantec’s Endpoint Support Tool that indicated that it came from Defense+. It gave me a hueristics alert for SupportToolDL.exe.

Now the strange part. Defense+ is disabled! Do you still get Defense+ alerts if it is disabled? This is the first Defense+ alert I have ever received since I installed Comodo 6 months ago.

Also I have used this support tool in the past and other than receiving a firewall alert asking if I want to allow it, no other Comodo alerts were issued.