Is this a software intrusion or a normal circumstance

Is this warning below normal or a software intrusion?

ZoneAlarm Security Alert
ADVANCED PROGRAM
Windows NT Logon Application is trying to use
Generic Host Process for Win32 services to act as a server.
Application: winlogon.exe
Source IP 0.0.0.0 Port 135

I googled for this error before asking but I did not find anyone else with
this error so I am forced to ask you for help. I did see that I should close
port 135 with the dcombobulator program so I will do that if you advise.

Is this a normal ZoneAlarm error or evidence of a spyware intrusion?
What would YOU do if you saw this on your WinXP machine?

Debbie

> Windows NT Logon Application is trying to use
> Generic Host Process for Win32 services to act as a server.
> Application: winlogon.exe
> Source IP 0.0.0.0 Port 135

Since this is the first time I've run ZoneAlarm, I'm confused
as to what this firewall program is trying to tell me when it
also reports:

ZoneAlarm Security Alert
Blocked
Windows NT Logon Application not allowed to use cssauth
to connect to 127.0.0.1 Port 6060.
Program: Windows NT Logon Application

Again, I don't find anyone with this particular error when I google.
Why would I have these alerts that nobody else has?

Are they so common that nobody else bothered to ask?
Or are they so rare that I got a bug that nobody else got?

If you saw these two alerts on your machine, what would you do?
I need your advice & help.

Debbie