Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsIf you installed and ran a suspicious ChatGPT app or pasted a command from a fake ChatGPT page into Windows, stop using it, uninstall the unwanted software, update Microsoft Defender’s security intelligence, and run a full scan. If the unwanted software persists, Microsoft recommends a Microsoft Defender Offline scan. Uninstalling the visible app alone does not establish that the device is clean.
First, stop the suspicious activity
- Do not reopen the app, rerun its installer, or paste any more commands from the page that promoted it.
- If you entered a command through Windows Run after a fake verification prompt, treat that as a possible malware execution—not as a harmless browser check. A September 2026 report described a fake Custom GPT and Cloudflare-style verification chain that used this method to install a remote-access Trojan. The real ChatGPT domain appearing somewhere in a redirect chain does not make the instructions safe. TechRadar’s report, citing Huntress, describes that campaign.
Remove the app and scan Windows
Microsoft’s documented initial response to unwanted software is to uninstall it, update Microsoft Defender security intelligence, and run a full scan. Use the current Microsoft instructions for the exact Windows Security controls, since labels and layouts can vary by Windows version.
As an Amazon Associate I earn from qualifying purchases.
- Uninstall the suspicious app: Open Settings > Apps, then look under Installed apps or, on some versions, Apps & features. Select the unwanted app and choose Uninstall. This removes its visible app entry; it is not a substitute for scanning.
- Update Defender security intelligence: Open Windows Security, go to Virus & threat protection, and check for protection updates. Follow Microsoft’s current instructions for updating security intelligence and running a scan.
- Run a full scan: In Windows Security, choose the full-scan option under virus and threat protection and let it finish. Review the results and follow Windows Security’s action prompts for anything detected.
- Use Microsoft Defender Offline if the threat persists: If unwanted software remains or returns, use Microsoft’s Defender Offline instructions for the appropriate current UI path.
Microsoft’s advice is to “Download apps only from trusted sources, such as Microsoft Store, and be thoughtful about which apps you install.” Microsoft Support documents the removal and scanning steps above. A clean scan is useful evidence, but it is not a guarantee that every file or account is safe.
Protect accounts that may have been exposed
If you entered passwords on the affected PC, or had passwords saved in its browser, treat those credentials as potentially exposed. Malwarebytes documented a fake ChatGPT download campaign in which the Windows installer launched a credential-stealing payload capable of exposing passwords, browser information, and other sensitive data. Change important passwords from a different, trusted device, starting with your email and financial accounts, and use each service’s official recovery and security pages. If you reused a password, change it on every account where it was used. This is a precaution based on the reported theft risk, not evidence that a particular account was accessed.
#1 Best Overall
- WHAT YOU GET: FixMeStick Virus Removal Tool for Windows PCs (Windows XP, Vista, 7, 8, 8.1, 10, and 11. 512 MB RAM required), Getting Started Guide, our virus removal guarantee backed by our friendly Canadian based Customer Support Team.
Malwarebytes’ example involved a lookalike site and a Windows installer that created files in %APPDATA%LeronApplication, launched EApp.exe, and spawned PowerShell. These are details of that reported campaign, not universal signs of every fake app. Do not manually delete files based only on those names; use Defender’s scan and response instead. See Malwarebytes’ campaign report.
When to get additional help
Seek qualified technical or incident-response help if Defender cannot remove the threat, suspicious activity continues, or the affected PC held sensitive work or business data. A remote-access Trojan can allow an attacker broad control of a device, so persistent or high-impact cases deserve escalation. This is a risk-based recommendation, not a requirement that every home user hire a specialist or reinstall Windows. The cited guidance does not establish a universal point at which Windows must be reinstalled.
Rank #2
- Emergency Boot USB compatible with Windows 98, 2000, XP, Vista, 7, and 10. It has never ben so easy to repair a hard drive or recover lost files
- Plug and Play type usb - Just boot up the usb and then follow the onscreen instructions for ease of use
- Boots up any PC or Laptop model and brand.
- Virus and Malware Removal made easy for you
- This is your one stop shop for PC Repair of any need!
How to verify the real ChatGPT Windows app
OpenAI says its Windows app is available from the Microsoft Store. Use the Store listing reached through OpenAI’s Windows app help page, rather than an ad, unsolicited message, or third-party download site. OpenAI’s security guidance says, “Only download OpenAI apps from in-app updates or the official webpages below:” See OpenAI’s security update for that advice.
Fake-app campaigns can use more than one delivery route: a downloadable installer or a page that persuades someone to copy a command into Windows Run. Microsoft also describes AI-brand lures used for phishing and malware delivery, including malvertising for a fake AI Windows plugin that delivered Vidar. These campaigns do not necessarily indicate that the impersonated AI service itself was compromised. Microsoft’s threat overview explains that distinction.
Rank #3
- [Win OS Install or reinstall] — Boot from the USB to install or reinstall Win 11, 10, or 7 Home & Pro editions. Includes OS installations and reinstallations media plus WinPE Utility Suite.
- [WinPE Repair & Recovery Tools] — Boot into the included WinPE utility suite to backup system and important files, troubleshoot startup problems, repair boot issues, recover data, recover Win User accounts password, and diagnose common PC problems.
- [All-in-One PC Rescue USB] — Combines Win 11, 10, and 7 installation media with PC repair, recovery, and diagnostic tools on one bootable 64GB USB drive, helping you troubleshoot and restore a computer without needing multiple discs or downloads.
- [Support] — Full instructions are included in packaging plus a printable copy of the instructions with troubleshooting information on the device. Also, a video “How to boot from a bootable USB drive.mp4” to help guide you through starting a PC from a USB drive. If you need help using the USB please contact us for assistance, we are here to help.
- [Video] - If you are new to booting from a USB drive or need a refresher see our video "How to boot from USB drive" both in description and on USB device.
For scale, Tom’s Guide reported Island’s estimate that a May–August 2026 advertising campaign involved around 850 paid ads, 26 fake ChatGPT links, and 71 Google Ads campaign IDs. Those are Island’s reported campaign figures, not independently verified counts or a measure of infections. Tom’s Guide’s coverage provides the attribution.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
