When I remove then re-add the widget I briefly see secured before it flicks to infected.
Settings file somewhere with an infected flag not being cleared?
It changes practically instantly, cant be scanning. What files does it read when it opens?