I
Neophyte

Neophyte

 • 

16 Messages

 • 

490 Points

Saturday, July 6th, 2024 12:12 AM

PUA.MacOS.Obfuscated.PFH

Since last night I keep getting PUA.MacOS.Obfuscated.PFH listed in my quarantine file, can't clean, delete it or quarantine it. Seems to only hidden in my nordvpn files 

any ideas?

Brand User

Trend Security Expert

 • 

37 Messages

 • 

790 Points

18 days ago

Hi @iandtudor 

Welcome to Trend Micro Users Community!

There might still be some remnants causing it to be detected. To completely remove these remnants, check all folders and subfolders on your Mac. Also, look for folders named after the publisher of the PUA. Use the file path provided by Trend Micro to find and delete any remaining files.

You can also check this link Encountering 'Threat: PUA.MacOS.Tuneupmac.PFH; Unable to Quarantine' in Antivirus for Mac Scan Results | Trend Micro Help Center

Hope This helps!  

Neophyte

 • 

3 Messages

 • 

110 Points

16 days ago

I have the same problem with the exact same file

Neophyte

 • 

3 Messages

 • 

110 Points

16 days ago

I have the exact same problem. It has happened today and I cannot delete the files. It is password protected. What is going on?

Brand User

Trend Security Expert

 • 

36 Messages

 • 

770 Points

Hi @tjanderson ,

Welcome to Trend Micro Users Community!

Like what's mentioned above, remnants of previously removed program might still be on your computer. To completely remove these, kindly look for folders and subfolders named after the publisher of the detected PUA by using the file path provided by the detection of Trend Micro.

You may also refer to this solution article for more reference: Encountering 'Threat: PUA.MacOS.Tuneupmac.PFH; Unable to Quarantine' in Antivirus for Mac Scan Results | Trend Micro Help Center

Hope this helps!

Neophyte

 • 

3 Messages

 • 

110 Points

You can't remove the file if it is password protected by a third party. You don't seem to understand!

Brand User

Trend Security Expert

 • 

37 Messages

 • 

790 Points

Hi @tjanderson 

You can try switching to Safe Mode, as it can sometimes prevent the PUA from running, making it easier to remove. While in Safe Mode, try to manually locate and delete the problematic files.

Hope this helps!

Neophyte

 • 

16 Messages

 • 

490 Points

16 days ago

Unfortunately it’s in an active app on my MacBook, so it’s not what you think it is

Need Help?

Ask the Community

Latest Tech Insights

Loading...