TrendLabs: qkG Filecoder

Figure 3: The ransom note displayed to the victim after the document is encrypted
REF: http://blog.trendmicro.com/trendlabs-security-intelligence/qkg-filecoder-self-replicating-document-encrypting-ransomware/