Check the security software logs/quarantines, there might be clues there? Same with Windows Reliability Reports.
Difficult to know what to advise, obviously *something* has changed over that time period so perhaps run full scans individually with each security software and check their logs to try to determine which one it might be causing the block?
Simply by running the scans, it might allow deeper checks to be made by the security software, perhaps by uploading anything 'suspect' to the cloud for checks. It's possible that the block was triggered solely on the location used to store temporary installer files and the scans will all come back clean.