in attempts to control and eliminate the worm, I block echo at the router and port 135 (win rpc) , as well, (tftp) port 69. I would guess many people do the same (ISP's).