You seem to be having some trouble...
Search online for a tool to RENAME on Reboot.
I use LockHunter to rename or delete files on reboot that are locked by services that I do not have permission to stop (nor want to adjust their permissions).
Fingers crossed for you!
I am on windows, and only with the boot stick was I able to rename (move, via cmd) the catroot2 to catroot2_
But I forgot to wash&repeat for windows\softwaredistribution !
Is it just me that can't rename these folders from in windows?
I think Resource Monitor indicates Mpeng (defender) as having files open. I ran a few things to disable defender (features) , which may be why sfc /verify reports tampering... and still windows update is complaining about stuff that's probably already installed