The fake CHKDSK screen is used as a decoy to trick users into believing their system is undergoing a routine disk check. In reality, GoldenEye is encrypting files in the background. This tactic aims to delay detection and buy time for the ransomware to spread.