A friend of mine just got hit with a newer version of TeslaCrypt. Delivered by an email with attached .zip file where once open it rename all her text, doc and pdf files to end with .mp3 extension. you are held ransom for decryption of encrypted files. But paying does not mean they unlocked all your files.
Ie
*.pdf.mp3.
if you rename your files back to .pdf you will find the files are encrypted. It will also attach itself to network drives and rename these also. Right now the only fix would be to wipe clean the drive and reinstall.
There are 47 pages of info at bleeping computers forum. (see link below)
http://www.bleepingcomputer.com/forums/t/605185/teslacrypt-30-xxx-ttt-micro-mp3-support-topic/?hl=%20teslacrypt