Nice work, Alaron. There are a few things I find odd though. I wonder why you could only boot into safe mode with the new nic? I haven't heard of that before. And I wonder why the msctl32.dll was only picked up in safe mode.
The other thing is the memory usage. On my machine winlogon is only using 4,088K. 2.5 MB seems excessive.
Well, keep an eye on it and see how things go.