JS.Fakeransom may have sneaked into the system, after the user has visited a compromised website. Typically, such 'infections' are spread via injecting malicious code into adult content pages or websites promoting pirated software.
Has your browser been locked? If so, JS.Fakeransom may be at fault. Such threats may act as scareware and may state that you need to pay a fine.