MotherSphere/NIKKE-Launcher-Check

选用指南

AI 根据 README 整理 · 2026/11/5 00:27:33

适用场景

适用于怀疑NIKKE PC启动器可能受到2026年11月安全事件影响的用户，可快速扫描或完整扫描以查找恶意痕迹。

查看 README 依据

chmod +x nikke-check-macos-arm64 xattr -d com.apple.quarantine nikke-check-macos-arm64 ./nikke-check-macos-arm64 ``` ### In the window The window opens with three buttons. "Scan this computer" is a quick scan: the install paths the launcher records, the usual Wine prefix folders, and every folder up to 5 levels deep, usually in seconds. "Full scan" opens every folder on every local drive, for an install the quick scan misses. "Scan a folder..." scans one folder you pick, such as a game library on another drive.

使用方式

提供图形界面，支持扫描本机、扫描文件夹和完整扫描，也可通过命令行使用。

查看 README 依据

chmod +x nikke-check-macos-arm64 xattr -d com.apple.quarantine nikke-check-macos-arm64 ./nikke-check-macos-arm64 ``` ### In the window The window opens with three buttons. "Scan this computer" is a quick scan: the install paths the launcher records, the usual Wine prefix folders, and every folder up to 5 levels deep, usually in seconds. "Full scan" opens every folder on every local drive, for an install the quick scan misses. "Scan a folder..." scans one folder you pick, such as a game library on another drive.

"Save report..." writes the text report to a file you choose, and "Copy report" puts it on the clipboard. Turn on "Hide my info" before you share it: it replaces your computer name, user names, agent ID and home folder in the saved or copied report (`--redact` on the command line). [Using the tool](docs/usage.md) covers the window, the report and the `--cli` mode. ### Language

部署要求

Windows 64位、Linux 64位（glibc 2.35或更高）或Apple silicon Mac。

查看 README 依据

| System | File | |---|---| | Windows, 64-bit | `nikke-check-windows-x86_64.exe` | | Linux and Steam Deck, 64-bit (glibc 2.35 or later) | `nikke-check-linux-x86_64` | | macOS on Apple silicon | `nikke-check-macos-arm64` | Each release also has `SHA256SUMS.txt`, the SHA-256 of each file. [Check the download](docs/usage.md#check-the-download) shows how to compare it on each system. ## Quick start ### Windows Double-click `nikke-check-windows-x86_64.exe`. The program is not signed, so SmartScreen can warn about an unknown publisher. Click "More info", then "Run anyway".

已知限制

仅读取文件，不修改、移动或删除任何内容，不进行网络连接。

查看 README 依据

# NIKKE Launcher Check NIKKE Launcher Check (`nikke-check`) looks for the traces left by the November 2026 compromise of the NIKKE PC launcher: the script loaded from insightjs.com, the remote-access agent that script downloaded, and the DLL and registry key the agent adds on Windows so that Google Chrome loads it. It only reads files: it does not change, move or delete anything, and it makes no network connections. The only file it writes is a report you save yourself with "Save report...". It also checks whether your hosts file blocks the malicious domains, but it never edits that file.