securelist[.]com/analysis/quarterly-malware-reports/78285/ddos-attacks-in-q1-2017/
The distribution of operating systems changed drastically in Q1: Windows-based DDoS bots surpassed the trendy new IoT bots, accounting for 59.81% of all attacks. This is the result of growing activity by bots belonging to the Yoyo, Drive and Nitol families, all of which were developed for Windows.
They don't give or speculate on a reason why.
When security software adds extra protection against ransomware, it'll do stuff like block access to the most common folders where people store their stuff, e.g. My Documents... that way malware can't change [encrypt] it. Heimdal PRO concentrates on network traffic, which hopefully would provide a little extra protection against something like a bot taking part in a DDOS attack.
Unfortunately the Heimdal PRO web site doesn't say out right in their ad copy that the software does the sort of in depth packet inspection I would think necessary to catch some of the more advanced malware sending your info back to it's home base [C&C]. That plus the absence of reviews means I have little or no idea how much it'll help with malware other than something like a botnet for DDOS.