A machine is broken by the latest update and needs it removed
Removing a cumulative update is not the same as uninstalling a program, and on a machine that will not boot it has to be done from WinRE.
What you see
After a Patch Tuesday a machine bluescreens, loses a feature, or will not boot at all, and the change needs reversing while the cause is investigated.
What is actually wrong
A regression in the update itself, or an interaction with a driver on that hardware. Either way the immediate need is to get the machine working.
Codes and articles
Fixes (2)
Remove the update from a running Windows
Windows still starts.
List what went on recently and when.
Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 10 HotFixID, Description, InstalledOnTry the simple route first.
wusa.exe /uninstall /kb:5034441 /quiet /norestartwusa cannot remove a combined SSU+LCU package, which is how most cumulative updates now ship. When it refuses, use DISM below — that is expected, not a failure.
If wusa refuses, find the package name.
DISM /Online /Get-Packages /Format:Table | Select-String 'RollupFix|LanguageFeatures|Package_for'Remove it by package identity.
DISM /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.3803.1.9Pause updates so it does not reinstall before you have investigated.
Set-ItemProperty 'HKLM:\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings' -Name PauseUpdatesExpiryTime -Value ((Get-Date).AddDays(21).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ssZ'))Without this the machine reinstalls the same update on its next scan and you are back where you started.
Restart.
Get-HotFix -Id KB5034441 -ErrorAction SilentlyContinueRemove the update from WinRE on a machine that will not boot
Windows no longer starts. Two failed boots normally bring WinRE up on its own.
Reach WinRE — power off during boot twice, or boot installation media and choose Repair your computer.
Try the built-in option first: Troubleshoot → Advanced options → Uninstall Updates → Uninstall latest quality update.
This does exactly what the DISM commands below do, without needing the package name, and it handles combined SSU+LCU packages correctly.
If that fails, open Troubleshoot → Command Prompt and find the Windows drive letter.
diskpartlist volumeexit
List the packages installed on the offline image, newest last.
DISM /Image:D:\ /Get-Packages /Format:TableRemove the most recent one.
DISM /Image:D:\ /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.3803.1.9Exit and restart.
Related faults
Where this stops. This write-up was written and checked by hand. It says what each step changes, how to confirm it worked and how to reverse it, and anything destructive is flagged before you reach it. If it does not match what your machine is doing, search the Support Centre for the exact code or message — and when something needs a person, get in touch.