We got hit by this one. According to some victims, if you pay the money, they will decrypt your files as promised. Otherwise, you better hope that you have a backup, or you are screwed.
Since that's obviously extortion, can't the company that receives the money be tracked down and busted?