Even when you pay to get a decryption key, you may find your files are still locked up by another strain of malware.