If one of my users called me over to show me "This FBI page just came up..." I would assume the page was bogus and that they had just been infected. The end result is the same though, I'd clean the machine and tell them to stop straying from work related usage