I've recently enabled scheduled scanning (deep scanning) from within Sophos Central, which has returned quite a few PUAs. Of the ~25 that appeared, I had the ability to select (maybe) 6 and choose the option to 'Clean PUA'. Doesn't mean it would be successful…