At the Applications branch of the event viewer I noticed this log, even having automatic updates disabled (not the service, the service just set to manual): Root certificates are the certificates in ...