I know this was dumb, but I was trying to remove this trojan that copied itself across my system and after successfully seeing all instances of the trojan using find / -name trojan I then did find / -delete -name trojan and immediately starting seeing "Operation not permitted" on files that were ...
user136984
user136984
user136984
user136984
user136984
user136984
user136984
user136984
user136984
user136984