It may not be the firewall's fault if it was
installed after the computer was already
infected, or if the trojan was ,through
some mis-configuration, authorized to
operate.
Some considerable knowledge is required
to really "secure" your machine, and obviously
the wisest first step in this case is the fresh
install of the OS