A small suggestion on a test that perhaps can help as it was an eye opener for myself how extrem weak and poor the built-in AV on my phone is. Even Google Play kicked in before and worked as a much stronger and faster layer.
Try disable layer after layer and watch what happens.
Is your security software running correctly? The AMTSO Security Features Check (SFC) tools verify that your security solution is properly configured and operating as expected.