Microsoft found that this update is causing Windows 7 Service Pack 1 (SP1) and Windows Server 2008 R2 SP1 to fail installing future updates. An update is available to remove KB 3004394 from Windows 7 SP1-based and Windows Server 2008 R2 SP1-based computers.
The Windows Root Certificate Program enables trusted root certificates to be distributed automatically in Windows. Usually, a client computer polls root certificate updates one time a week. After you apply this update, the client computer can receive urgent root certificate updates within 24 hours.
Download the fix from here – https://support.microsoft.com/kb/3024777