Comment No data is actually encrypted..... (Score 5, Informative) 202
Fortinet did an analysis of this.
http://blog.fortinet.com/all-your-drives-are-belong-to-us/
It simply backs up the partiton table and rewrites the MBR. It's fixable without paying the ransom.