I am on windows, and only with the boot stick was I able to rename (move, via cmd) the catroot2 to catroot2_
But I forgot to wash&repeat for windows\softwaredistribution !
Is it just me that can't rename these folders from in windows?
I think Resource Monitor indicates Mpeng (defender) as having files open. I ran a few things to disable defender (features) , which may be why sfc /verify reports tampering... and still windows update is complaining about stuff that's probably already installed