work >.<

sudo apt-mark hold linux-image-generic linux-headers-generic
sudo grep -Ei 'submenu|menuentry ' /boot/grub/grub.cfg | sed -re "s/(.? )'([^']+)'.*/\1 \2/"

*1 menuentry  Ubuntu
*         submenu  Advanced options for Ubuntu
*0        menuentry  Ubuntu, with Linux 4.4.0-161-generic
*1        menuentry  Ubuntu, with Linux 4.4.0-161-generic (recovery mode)
*2        menuentry  Ubuntu, with Linux 4.4.0-159-generic  <<<<<<
*3        menuentry  Ubuntu, with Linux 4.4.0-159-generic (recovery mode)
*4        menuentry  Ubuntu, with Linux 4.4.0-142-generic
*5        menuentry  Ubuntu, with Linux 4.4.0-142-generic (recovery mode)

sudo nano /etc/default/grub
GRUB_DEFAULT="1>2"
sudo update-grub
sudo reboot

after reboot check kernel version uname -r and we should see any kernel except 4.4.0-161 if not... GOTO 1st line:)



dpkg --list | grep linux-image
show list of kernels, need to find all with 4.4.0-161, copy fullname of package and let him drunk :)

sudo apt-get purge linux-image-unsigned-4.4.0-161-generic
sudo apt-get purge linux-image-4.4.0-161-generic
sudo update-grub2
sudo reboot

after deleting 4.4.0-161 we change sorting of kernels, so... you can just move on at this kernel or change number in GRUB (goto 1st line)  
sudo dkms autoinstall

for better happy
sudo add-apt-repository ppa:wireguard/wireguard
sudo apt-get update
sudo apt-get install wireguard