If mail scanner finds a message with infected attachment, it is possible remove the attachment, not the whole mail. If mail heuristic analysis finds suspicious massage, it is possible to remove the whole message (replace it with info message).