Hi,
at this time I can say that green header bar shows device status computed from several information obtained from device. These information are how long virus database is obsolete, how long device is not synchronized with cloud server, whether file, mail and web shields are disabled, how long client antivirus software is outdated and whether there are some unseen items in virus chest.
The information that virus has been detected on device doesn't affect that device status in header at this time.
IMHO if the virus has been detected, but not deleted it is relatively safe because antivirus knows about infected file and antivirus doesn't allow to manipulate with that file (execute and so on) since that time.
JKA