Yes, this BlackRuby ransom-ware type virus is one that immediately after infiltration, encrypts most stored files and then renames them and makes them unusable. It also features and checks the victim’s IP address to detect the location, and if in Iran it will not encrypt the files- also I heard they will ignore the victims, even if they pay the $650 ransom.