pua.macos.obfuscated.pfh

Hi @iandtudor 

Welcome to Trend Micro Users Community!

There might still be some remnants causing it to be detected. To completely remove these remnants, check all folders and subfolders on your Mac. Also, look for folders named after the publisher of the PUA. Use the file path provided by Trend Micro to find and delete any remaining files.

You can also check this link Encountering 'Threat: PUA.MacOS.Tuneupmac.PFH; Unable to Quarantine' in Antivirus for Mac Scan Results | Trend Micro Help Center

Hope This helps!  

I have the same problem with the exact same file

I have the exact same problem. It has happened today and I cannot delete the files. It is password protected. What is going on?

Hi @tjanderson ,

Welcome to Trend Micro Users Community!

Like what's mentioned above, remnants of previously removed program might still be on your computer. To completely remove these, kindly look for folders and subfolders named after the publisher of the detected PUA by using the file path provided by the detection of Trend Micro.

You may also refer to this solution article for more reference: Encountering 'Threat: PUA.MacOS.Tuneupmac.PFH; Unable to Quarantine' in Antivirus for Mac Scan Results | Trend Micro Help Center

Hope this helps!

You can't remove the file if it is password protected by a third party. You don't seem to understand!

Unfortunately it’s in an active app on my MacBook, so it’s not what you think it is

Hi @tjanderson 

You can try switching to Safe Mode, as it can sometimes prevent the PUA from running, making it easier to remove. While in Safe Mode, try to manually locate and delete the problematic files.

Hope this helps!