If you can, it might be useful to open the System event log, go to View,
choose Filter, and set the Source dropdown control to "WinDefend" and see
whether there are events in that log that you can relate to this
issue.
If you find anything enlightening, using the cut and paste button to paste
them back here may be useful.