UserFriendly - 3:05 pm on Oct 2, 2010 (gmt 0)
Definitely don't pay their ransom. If you do, you'll end up on a sucker list that they sell to other criminals, and your troubles will likely multiply.
As for bad reviews, there are so few reviews worth paying attention to online that I suspect the smart public are already bored of paying them any attention. I do like Amazon's "Real Name" reviews, because at least some effort has gone into validating the user's identity. But, generally, online reviews by non-established users are worth zero.