Ransomware Bad Rabbit encrypts certain file types, encrypts disk and encrypts the disk. When infected computer boots up, the victims are informed that their files have been encrypted by Bad Rabbit. Bad Rabbit uses the same screen to allow victims who have received the decryption key to enter it and boot their system. The experts also discovered that Bad Rabbit does not delete shadow copies, allowing victims to restore the files through this windows backup functionality. Unfortunately, there is only a slim chance that victims will be able to extract the password.”]
Source: http://securityaffairs.co/wordpress/64863/malware/bad-rabbit-ransomware-decryption.html