If you use Windows to do any monetary work over the Internet, it doesn't matter.
You could, at any time be compromised by a keylogger and not know it.
No monetary work should be conducted using Windows...it's plagued with so many known and unknown problems, even the best informed and diligent user is rolling the dice.
Banking Trojans or keyloggers, prolific & readily installed via several vectors, can and do clean out bank accounts.
(see: Krebs on Security: http://www.krebsonsecurity.com/2010/01/money-mules-helped-to-rob-w-va-bank/
Also "Krebs on Security": eBanking Victim? Take a Number.
http://www.krebsonsecurity.com/2010/03/ebanking-victim-take-a-number/
"...if your bank doesn’t offer multi-factor authentication or transaction confirmation that’s out-of-band, ►►use a locked-down, dedicated workstation [or Operating System] for nothing but accessing your bank website or use a live boot distro. Or acknowledge that you’re playing Russian roulette..."
("Out of band" means using a second, non-Internet based communication, like telephone, to verify the transaction).
The single best strategy you can have is to use a solo partitioned Linux OS (like Ubuntu) for all Internet facing applications, like browsing & mail; not just banking. Then if you happen to pick up Windows targeted malware, it can't compromise your personal/sensitive data.
Use Windows for all your "in-house" work, but do not have ANY personal/banking data saved to it.