A third-party application known to cause this issue is Trust View for UDP. This application contains a kernel driver that tries to suspend the installer while processing a thread create notification to inject a DLL, and then tries to resume the installer.
McAfee products that include Arbitrary Access Control (AAC, the replacement to Access Protection), and specifically version 15.4, allow the suspend to occur. But, they prevent the attempt to resume, which leaves the installer in a suspended state.
