MM are you even aware of what messenger service 135 is?
If memory serves me right. It is the same port used in net send messages. Or atleast an initiator.
I also hate to break it to you, but it is not regurgitation off of the media. I am current in the IT field. I can list the initials behind my name if you wish. I almost guarantee it is a longer list than yours.
EDIT: MM don\'t take it personal. I am not, and doubt I ever will be a fan of software firewalls. Especially when you can pick up somthing like a cisco pix 501 for a couple hundred bucks. This part I am about to regurgitate from what I have read. I believe norton internet security had problems with this worm. The simple fact of the matter is that the operating system still controls the software.
EDIT again: Here is a quick list of tcp-ip ports used. You will notice a tremendous amount above port 1024. 1024 may have been the limit 2-3 years ago??
http://www.iana.org/assignments/port-numbers