try going into the internet options under content then certs. then clear the ssl state and go into the certs button and remove them all.

if that doesnt work go to your services and stop the update and background intelligent service. Once those services are stopped you can go to c:\windows and rename the folder software distribution. I also remove the Wuwebcontrol class object from the internet options>>>settings>>>View objects and just right click and delete the active x control. After that you can usually go back to the windows update site and run the updates like usual. I do this for my clients when they have update issues and seems to work pretty good.