Issue in Opening docker in Mac due to suspected malware.

[Ujjwal0Singh0]

Description

I can't run/ start docker in my Mac. It was fine until yesterday. I tried rebooting to stop the continuous popping message of Malware Blocked. It goes as follows- “com.docker.vmnetd” was not opened because it contains malware. This action did not harm your Mac.

Reproduce

.

Expected behavior

No response

docker version

latest

docker info

.

Diagnostics ID

.

Additional Info

No response

[thaJeztah]

Thanks for reporting; this looks like a duplicate of #7527, and various other ticket; also see https://dockerstatus.com and the related blogpost; https://www.docker.com/blog/incident-update-docker-desktop-for-mac/

[Vir2S]

Does this issue solved?

[aalmero]

1. Downloaded/Installed the latest version as recommended.
2. Manually allowed the app in the Privacy & Security settings. (It was being blocked there explicitly)

[asapsmc]

This is not solved, at least for macos intel-based. I can not even install docker.
I start receiving messages when trying to install "Docker is damaged and can’t be opened. You should move it to the Bin."
Not even with patch release 4.37, even though I did all the steps provided in #7527:

[vitalikaz]

This is not solved, at least for macos intel-based. I can not even install docker. I start receiving messages when trying to install "Docker is damaged and can’t be opened. You should move it to the Bin." Not even with patch release 4.37, even though I did all the steps provided in #7527:

Same here on Intel chip. This error occurs during installation for me as well, and nothing helps.

UPD: it looks like updating MacOS to latest version fixed the problem :) Previously used some 14.x version.

[r-leyshon]

Running on macos sequia 15.2 , M1 chip. Docker v4.37.2 has not resolved the issue. I have ran check.sh with the following output, but still getting the Malware Blocked Prompt at intervals:

% ~/Downloads/check.sh

...

com.docker.vmnetd is signed with a correct certificate

[Clove-M2D]

Unfortunately also encountering the same issue as two users above with an Intel-based Mac. I am already on the latest version of MacOS (Sequia 15.2) - At no point have I ever received the Malware Blocked Prompt.

Instead:-

1. Updated docker
2. On restart, received "Docker is damaged and can't be opened warning."
3. Uninstalled Docker
4. Reinstalled latest version of Docker (v4.37.2) - Unsuccessful - Tried multiple attempts
5. Tried installing older versions of Docker at https://docs.docker.com/desktop/release-notes/ - Unsuccessful
6. Tried reinstalling Docker and following the steps in https://docs.docker.com/desktop/cert-revoke-solution/ - Unsuccessful
7. Followed steps in Malware detection prevents Docker Desktop to start #7527 - Unsuccessful

The issue is that docker desktop desktop doesn't run and is non-functional after installation. If I try to restart the device I will receive a warning that Docker is still running and the system cannot be shut down.

I note that this is an ongoing issue, if anyone else is still encountering this issue they may want to try running through the above and seeing if any works for them (some of these steps resolved this issue for other users, unfortunately not me!)

If there are any other suggestions, happy to test and add to this list with my results.

EDIT:- Despite trying a few recommendations for removing all files and reinstalling, only those from @dmk1111 below worked for me - Finally fixed this issue - #7550 (comment)

[alex-roytikh-pop]

This is still an issue with the malware popup coming up every 10 seconds. I dont even have docker installed anymore and this is blocking local developement

[dmk1111]

I've removed Docker and cleaned up all leftovers manually:

sudo rm -Rf /Applications/Docker
sudo rm -f /usr/local/bin/docker
sudo rm -f /usr/local/bin/docker-machine
sudo rm -f /usr/local/bin/docker-compose
sudo rm -f /usr/local/bin/docker-compose-v1
sudo rm -f /usr/local/bin/docker-credential-desktop
sudo rm -f /usr/local/bin/docker-credential-ecr-login
sudo rm -f /usr/local/bin/docker-credential-osxkeychain
sudo rm -f /usr/local/bin/hub-tool
sudo rm -f /usr/local/bin/kubectl.docker
sudo rm -f /usr/local/bin/kubectl
sudo rm -Rf ~/.docker
sudo rm -Rf $HOME/Library/Containers/com.docker.docker

After this installed it with Homebrew:

brew install --cask docker

This solved the issue (Mac OS X Sonoma 14.6.1, Docker v4.37.2)

[n1crack]

Removed everything, installing with brew worked for me. Thanks

[Sumedh-k]

@dmk1111 on the last step I get this error.

sudo rm -Rf $HOME/Library/Containers/com.docker.docker
rm: /Users/sumedh/Library/Containers/com.docker.docker/.com.apple.containermanagerd.metadata.plist: Operation not permitted
rm: /Users/sumedh/Library/Containers/com.docker.docker: Operation not permitted

[dmk1111]

@Sumedh-k make sure you killed all docker processes. Try to reboot the computer if this doesn't help and try again