so, what actually happened?

well, they managed to install this driver, somehow. i'm not sure which one it is yet, but it seems like it's a windows update related thing.

after i allowed the boot without driver verification, those error messages stopped and whatever zombie process is running was able to actually install this list of cat files in the catroot folder, which initially included a lot of scary things like iis servers (but had been deleted by the time the script got to running).

so, if i were to actually boot without the driver signing verification, it would install this pile of garbage on my system.

i have little choice but to reformat, and take a much closer look at what's going on. it may be using some kind of background logging script, which i may have to completely dismantle.

but, that seems to be the crux of it - they want me to turn the verification off so i can install some kind of surveillance server.