All activities of this computer have been recorded
The All activities of this computer have been recorded virus (also found as the All activities been recorded virus, etc) is a form of dangerous malware categorized as ransomware that fraudulently masquerades as the United States government such as the FBI, U.S.A. Cyber Crime Center, Cyber Crime Unit, Department of Justice, and Interpol alike the FBI virus and blocks access to the infected computer or simply locks a browser window in place by displaying a full screen window or webpage that claims to be fbi.gov (etc.) that says the computer was used in illegal cyber activity.

The All activities of this computer have been recorded FBI lock-screen page displays a government seal such as a FBI seal, says All activities of this computer have been recorded – All your files are encrypted. Do not try to unlock your computer! – Your browser has been blocked due to at least one of the reasons specified below, and claims to contain a message from the FBI that fraudulently states that the affected computer was involved in illegal activity including the distribution of prohibited pornography, copyright content, and even computer negligence. Furthermore, the All activities of this computer have been recorded FBI virus screen states that the computer owner may see jail time (or face further prosecution) if a penalty fine of $300 or more is not paid by use of GreenDot Moneypak or MoneyGram credit services in an allotted amount of time usually 48 hours. *Paying the fine will NOT remove this virus. This computer virus is in no way associated with the government of The United States of America.
If a victim does pay a fine, a second virus browser window will appear called the FINE HAS BEEN PAID virus that asks for an additional $450 to remove all criminal records, making the fine total $750. DO NOT PAY THE FINE!
The allegations made on the fake All activities of this computer have been recorded virus page should be ignored. You are not actually in trouble with the law.
The details on the All activities of this computer have been recorded virus lock-page are detailed below:
FBI Federal Bureau of Investigation Cyber Department All activities of this computer have been recorded. Do not try to unlock your computer! Your browser has been been blocked due to at least one of the reasons specified below. You have been subjected to violation of Copyright and Related Rights Law (Video, Music, Software) and illegally using or distributing copyrighted contents, this infringing Article 1, Section 8, Clause 8, also known as the Copyright of the Criminal Code of United States of America. Article 1, Section 8, Cause 8 of the Criminal Code provides for a fine of two to five hundred minimal wages or a deprivation of liberty for two to eight years. You have been viewing or distributing prohibited Pornographic content (Child Porno photos and etc were found on your computer). This violating article 202 of the Criminal Code of United States of America, provides for a deprivation of liberty for four to twelve years. Illegal access has been initiated from your PC without your knowledge or consent, your PC may be infected with malware, this you are violating the law on Neglectful Use of Personal Computer, Article 210 of the Criminal Code provides for a fine of up to $100,000 and/or deprivation of liberty for four to nine years. Pursuant to the amendment to Criminal Code of United States of America of May 28, 2011, this law infringement (if it is not repeated - first time) may be considered as conditional in case you pay the fine of the States. To delete this case from all criminal records and avoid any problems at work and other places where criminal records can be checked, you are obligated to pay a release fee of $300, payable through GreenDot MoneyPak (you have to purchase MoneyPak card, load it with $300 and enter the code). You can buy the code at any shop or gas station. MoneyPak is available nationwide.
The All activities of this computer have been recorded virus and similar forms of ransomware are dangerous for their relationship with cyber crimes including credit theft, extortion, and identity theft. In many cases, even if the All activities of this computer have been recorded virus screen is removed, malicious files, trojans, and other malware may remain undetected and may be used to collect and observe sensitive user information and activity.
Instructions to remove the All activities of this computer have been recorded virus are detailed further below.
How does the All activities browser virus get onto a computer?
The All activities of this computer have been recorded ransomware infection is primarily contracted via compromised websites (including legitimate websites, hacked websites, and drive-by-download sites), malicious advertisements, torrent downloads, and spam email attachments. The All activities of this computer have been recorded virus first accesses a computer system with help or trojan horses.
- In other cases where a browser window is simply locked in place, the victim may have clicked a malicious link which caused a browser window to lock for a limited amount of frame sets, such as 140; meaning if you attempt to close the window or alert message a total of 140 times, the browser-lock will be removed.
- Resetting your internet browser or force closing the browser window using Windows Task Manager (Ctrl+Shift+Esc) to end the used internet browser process will also remove this infection.
- Antivirus or Anti-Malware software with real-time protection often blocks these infections from occurring.
How to remove All activities FBI virus
- Removal software (Automatic removal) – Detect and remove ransomware
- System Restore – Restore PC to date and time before infection
1. All activities FBI virus removal software
1. Install the free or paid version of Malwarebytes Anti-Malware software.
![]()
Malwarebytes Anti-Malware
Editor’s Choice

Latest versions: Malwarebytes Anti-Malware PRO, Malwarebytes Anti-Malware Free
Release date: 2013
![]()
2. Once Malwarebytes is installed, open the Anti-Malware program. If you are using the free version of Malwarebytes you will be prompted to update the database, please do so.
3. On the first tab labeled “Scanner” select the Perform full scan option and click the Scan button to perform a full system scan (pictured below).

4. Malwarebytes will automatically detect the All activities of this computer have been recorded virus and third-party malware on your computer. Once the scan is complete, Malwarebytes will prompt a message stating malicious objects were detected. Select (check) the malicious objects in the list and click the Remove Selected button to completely remove All activities of this computer have been recorded malware from your computer (The image below shows a file that is NOT selected for removal – ‘Make sure the box is checked in’).

2. System Restore
A System Restore is an easy solution to restore an infected computer to a date and time before it became infected with All activities of this computer have been recorded FBI ransomware. To learn more please select a link below.

All activities FBI virus removal tips:
If removing the All activities of this computer have been recorded virus (etc.) and other forms of ransomware is difficult, there are several steps you can use to troubleshoot the removal process:
User accounts
Ransomware often infects 1 user account on Windows systems at a time. Here are some tips to remove this virus using different user accounts.
- Log into an account not affected by malware (with administrative rights) and perform a scan with reputable software to detect and remove malware.
- You can also delete the infected account.
- Other options include creating a new user account to remove malware if only 1 Window’s user account is present on the computer system.
Denying flash
Some variants of ransomware use flash and symptoms of the infection can be suspended by denying flash via Macromedia’s real-time options. To learn more and deny flash please visit: http://www.macromedia.com/support/documentation/en/flashplayer/help/help09.html
Troubleshoot internet/network issues
Safe Mode With Networking can be used to access the Internet for updates, drivers, removal software, or other files if internet and network connectivity is compromised.
- ConnectWise DDoS Attack Claimed by 313 Team
- Vercel Breach Leaves Customers Rotating Secrets After AI OAuth Compromise
- Bluesky Confirms DDoS Attack After 313 Team Claims Responsibility
- EU Age Verification App Hacked With Little to No Effort in Public Demo
- Marion Correctional Institution Inmates Ran a Hidden Hacking Operation From Inside Prison for Months
Sean Doyle
Sean is a tech author and security researcher with more than 20 years of experience in cybersecurity, privacy, malware analysis, analytics, and online marketing. He focuses on clear reporting, deep technical investigation, and practical guidance that helps readers stay safe in a fast-moving digital landscape. His work continues to appear in respected publications, including articles written for Private Internet Access. Through Botcrawl and his ongoing cybersecurity coverage, Sean provides trusted insights on data breaches, malware threats, and online safety for individuals and businesses worldwide.







