Not sure if it does. We experienced what appeared to be the start of ransom attempt where we were told not to power off or all passwords credit cards etc would be lost. We powered off anyway restarted, scanned again webroot said nothing was detected but launching the browser resulted in the pop up indicating we might be infected. We powered off and rebooted then deleted the browser. Scanned again and webroot again indicted nothing was detected.
Recommend norton which was not in the store the day we purchased webroot and we were in a rush.