Email marked and disconnected as containing a virus is disconnected with the reason "Spam", same as email detected as Spam. There is no differentiation, except that Spam emails can still be routed to a queue in the settings, and the ones containing a virus will be those marked as Spam but which did not route to the queue.
No, you have no access to tune or examine SES. You'd have to go through Support to initiate a SERVOPS ticket to see if they can do anything.
------------------------------
George Ganahl GCP (Genesys Cloud), CCXP
Principal PS Consultant
Genesys
------------------------------