Main thing to remember with Windows firewall is that it will disallow incoming traffic but it allows outgoing traffic, so if a trojan is downloaded it can "phone home" which can be troublesome. IMHO my system using AVG Free and ZoneAlarm Free has been fine for me and other than running checks every month (Adaware, SpybotSD and Asquared free) I have a clean machine.