I have my system set to "Return with – message was ‘Virus in message’" and "Disinfect Message (with GMS Anti-Virus)" selected.
If you set the GMS Anti-Virus options to "deliver as usual" and "Disinfect message" then the virus (eicar.com) is removed correctly. With settings of "Return with" and "Disinfect message" the message was returned OK but eicar.com was not removed.
This has now been fixed in builds 3136 and later.
Keywords:incoming email virus