Symptom:
You see the following log appear in your application log, sometimes it has CAPI2 or other stuff in there.
Failed extract of third-party root list from auto update cab at: (http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab) with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Fix:
Please head straight to Microsoft KB
http://support.microsoft.com/kb/2328240
It has a "Fix It" installer to assist the fix of this issue.