Merlin Hacked Again
Three new variations of FireDaemon services popped up. I disabled them.
I left NT LM Security Support Provider running last time, but based on this decided to shut off:
NT LM Security Support Provider Service
Followed this advice:
ITC Newsletter, Volume 7, No. 4 May 2003