By default, bucketAV deletes infected files. Set the DeleteInfectedFiles configuration parameter to false to disable the action.
If the infected S3 object is versioned, the object version is deleted, not the object. In other words, no delete marker is added.