How to Remove the DragonDrop Virus From Mac

Macs rarely encounter problems with malware but it does happen from time to time. One of the more common malware-related issues Mac users tend to encounter is when the built-in system security spots a rogue app or process and warns you about it with a message that reads something along the lines of “*Rogue app* will damage your computer”.

Such is the case with a malware called DragonDrop. Recently, Mac users have started reporting seeing warnings about this malware on their machines. The security prompt gives the option to move the malware to Trash, but clicking the respective option appears to not do anything and the DragonDrop warnings appear again sometime later.

DragonDrop appears to be a new type of Mac malware that’s still underresearched and it shouldn’t be confused with the DragonDrop app that existed about a decade ago or the indie Dragon Drop game that’s on Steam. Not much is known about this malware, but it’s almost certainly a type of adware app that injects ads into your browser search results and tries to aggressively promote various sketchy sites.

We’ve seen this exact issue with other Mac malware like Search Marquis and Search Baron. Some time ago a number of Mac users also complained about a security warning message that read “mac will damage your computer” – basically the same issue under a different name.

The method for dealing with all of these forms of malware is virtually the same and will be shown in the following sections.

Name	“mac” will damage your computer
Type	Adware
Detection Tool

“Dragondrop Will Damage Your Computer” Removal Guide

This Dragondrop removal tutorial should let you clean your Mac of this malware, but I can’t promise that it will work in all cases. This is because some of the next steps require you to do much of the legwork yourself, which increases the likelihood of missing something and failing to remove it when you should.

Now, if you are still determined to get rid of this malware the hands-on way, here’s what you must do:

Open up your Applications folder and take a good, hard look at what’s there. Spot anything new, unfamiliar, or plain sketchy? If so, it’s time to say goodbye. Drag those questionable apps straight to the Trash.

Now, I get it—sometimes it’s not obvious which apps are the troublemakers. Maybe you recently downloaded a third-party app that seemed totally legit at the time. Here’s a tip:

• If you don’t remember installing it or if it doesn’t serve a clear purpose, it’s probably not worth keeping. Rogue software often hides in plain sight, masquerading as something useful.

Once you’ve cleared out the culprits, don’t forget to empty the Trash. Trust me, leaving it there just gives it another chance to mess with you.

How to Remove DragonDrop in Activity Monitor

If your Mac security spotted the DragonDrop malware, it’s highly likely that the rogue app is currently running one or more of its processes. Therefore, you must go to the Activity Monitor and look for anything suspicious that might be linked to the malware:

1. Navigate to the Utilities folder and fire it up. You’ll see a list of processes, some familiar and some… not so much. It’s the unfamiliar ones we’re interested in here.
2. Scan the list carefully. If something looks off—maybe it has a weird name or it’s hogging system resources—double-click it.
3. Select Sample, and the system will generate a report about the process.
4. Now, here’s the tricky part: you need to figure out whether this process is essential or not. A quick online search can help. For example, system processes like “kernel_task” are crucial, but something with a name like “helper123” might be waving a big red flag.
5. If you confirm it’s suspicious, note its file path, head to Finder, and use the Go > Go to Folder option to locate and delete it. Just be careful not to delete something your Mac actually needs!

Once you think you’ve cleaned your Activity Monitor from rogue processes, it’s time to move on to the next stage of the removal process:

Delete DragonDrop User Profiles

A typical trait of Mac malware is that it often creates rogue user profiles in the system that allow it to gain access to more types of settings.

One thing to note here is that the names of those profiles typically look innocuous, like something created by a regular legitimate program. That’s why many users miss them which in turn also allows the malware to persist in the system.

At the same time, spotting them and deleting them is really easy:

1. Head to System Settings > Users & Groups, click the little padlock icon, and enter your admin password to unlock the settings.
2. Look through the list of profiles. Do any of them seem out of place? Malware profiles often have names that sound legitimate, like “AdminPrefs” or “TechSupportSettings,” so don’t be fooled.
3. If you find a profile that doesn’t belong, select it and click the minus button to delete it.

Removing these rogue profiles is like shutting a backdoor that malware could use to regain access after you’ve kicked it out.

Get Rid of DragonDrop Access Permissions

DragonDrop has also likely given itself a variety of system permission that let it automatically launch its processes and/or reinstall itself in case you manage to delete it. These permissions must be revoked if you want to fully get rid of the malware:

1. Go to System Settings > Security & Privacy > Full Disk Access and review the list of apps that have this level of control.
2. If anything looks fishy, right-click it, choose Show in Folder, and delete the app’s file.
3. Then, return to the permissions list and remove it by clicking the minus button.

This step ensures that no rogue software can tamper with your system’s files or settings. Don’t worry about being overly cautious here—it’s better to revoke permissions for an app you’re unsure about than to leave it unchecked.

Delete DragonDrop Rogue Files in Key Directories

This is one of the most important steps when it comes to fighting malware on Mac. Most rogue apps like DragonDrop create a bunch of files in several typical directories. You must go to these folders, look for suspicious files, and delete them.

First, you’ll need to restart your Mac in Safe Mode:

• On Intel Macs: Shut down your Mac, press the Power button, and immediately hold the Shift key until the login screen appears.
• On Apple Silicon Macs: Shut down your Mac, hold the Power button until the “Loading Startup Options” screen appears, select your main volume, then hold Shift while clicking Continue in Safe Mode.

Once in Safe Mode, from the Menu bar, open Go > Go to Folder to access the following directories one by one:

1. /Library/LaunchDaemons
2. ~/Library/LaunchAgents
3. /Library/LaunchAgents

Switch the folder view to a list for easier navigation.

Look for files with odd names—like random letters and numbers—or files containing terms like “helper,” “search,” or “scan.”

Delete anything that seems out of place, but be cautious not to remove system-critical files. If you’re unsure, take a moment to look up the file names users have listed in this Apple discussions thread.

Also look for files that include the words shown below. If you notice any such files, delete them:

• calculator
• calender
• confcloud
• copypaste
• date
• fixer
• gettime
• helper
• hlpr
• mafntask
• moniter
• pcv
• scan
• search
• smokyashan
• systemond
• systemExtr
• spigot
• techyutil
• time
• updService
• util
• utilty
• vlm

After cleaning out these directories, restart your Mac and check if the error persists. If it’s still there, head back into Safe Mode and give the folders another once-over. Sometimes, malware is stubborn and requires a bit of persistence.

---

Whitelisting Safe Apps (If Necessary)

Sometimes, the “DragonDrop” warning targets apps that you know are safe. If you’re confident an app isn’t harmful, you can whitelist it to stop the error message. Here’s how:

1. Locate the app in Finder, right-click it, and select Get Info.
2. Unlock the settings by clicking the padlock icon and entering your admin password.
3. Check the Override Malware Protection box and close the window.

This bypasses macOS’s built-in security for that specific app. Just remember: only do this for apps you trust completely.

Stay Ahead of Malware: Prevention Tips

To avoid dealing with this headache in the future, follow these simple tips:

• Download apps only from trusted sources like the Mac App Store or official developer websites.
• Keep macOS updated to benefit from the latest security features.
• Regularly review your system settings and permissions for any unauthorized changes.

Staying vigilant is your best defense against malware. A little caution now can save you a lot of trouble later.

Wrapping Up: Regaining Control of Your Mac

The “DragonDrop will damage your computer” warning is more than just an annoyance—it’s a sign that something’s wrong. By following these steps, you can remove unwanted software, restore your system’s security, and prevent future attacks.

If you’ve gone through all the steps and the error is still popping up, don’t hesitate to seek help from a professional or use anti-malware software for a thorough scan. Remember, it’s always better to be safe than sorry when it comes to your Mac’s security. Now, go take back control of your system and keep it running smoothly!