Why is cloud scanning active?

I have the FW only running.
Comodo AV is not installed.
Malware is disabled.

Why is this comodo cloud scanner trying to block an application?

The only time I have seen it was today, and it wanted to block a security tool, the heuristics are a false flag, but that is beside the point.

CFW uses the Comodo cloud to look up files. If it finds a file to be malware it is Comodo’s idea to notify the user as a service. That’s why you see the AV alerts from the cloud av.

This is a malware protection service, IMO, that is where it should stay.