Online banking protection only works if a banking trojan is already on the system = preinfected.

Online banking protection ≠ some kind of generic online banking protection (but unfortunately, that is what the vast majority of users think it is).

It takes a combination of browser protection, data isolation, network encryption, cookie protection, blocking of malicious installs, etc to provide an "all-around" banking protection.

Read the MRG test report carefully...