Even when you pay for a decryption key, your files may still be locked up by another strain of malware.