Log after log off:
01/25/16 13:44:05 Protection level is set to <medium>.
01/25/16 13:44:09 Prevented process <msvcp60.dll | C: \ Windows \ System32 \ regsvr32.exe> from launching from <c: \ programdata \ windows genuine advantage \ {f0d3befc-0e6a-49b1-b6ee- B40707328827}.
01/25/16 13:44:10 Prevented process <scksp.dll | C: \ Windows \ System32 \ regsvr32.exe> from launching from <c: \ programdata \ windows genuine advantage \ {0a57af4b-2092-4aab-9e6c- 5f79fd148666}.
01/25/16 13:44:19 Prevented process <cnvfat.dll | C: \ Windows \ System32 \ regsvr32.exe> from launching from <c: \ programdata \ windows genuine advantage \ {49b9a045-a749-43de-afba- 0d25ebefe36b}>.
01/25/16 13:44:23 Prevented process <tmp13e2.tmp | c: \ windows \ explorer.exe> from launching from <c: \ users \ AA \ appdata \ local \ temp \ {df907dca-1f42-4b8f- Ab0e-e42a8424f8ae}>.
01/25/16 13:44:38 Prevented process <dhcpcsvc.dll | C: \ Windows \ System32 \ regsvr32.exe> from launching from <c: \ programdata \ windows genuine advantage \ {248a4374-c0ba-4e72-bf07- 277a3369ce88}.
01/25/16 13:45:07 Prevented process <clfsw32.dll | C: \ Windows \ System32 \ regsvr32.exe> from launching from <c: \ programdata \ windows genuine advantage \ {f41df4e1-6f46-4272-a6b8- 4645c4a95bbb}>.
01/25/16 13:45:44 Prevented process <keymgr.dll | C: \ Windows \ System32 \ regsvr32.exe> from launching from <c: \ programdata \ windows genuine advantage \ {55c5c478-3608-4801-b3fc- D3feb3417cab}.
01/25/16 13:46:02 Prevented process <eqossnap.dll | C: \ Windows \ System32 \ regsvr32.exe> from launching from <c: \ programdata \ windows genuine advantage \ {735696d8-0d94-43f0-85d9- 02a5f85ff4f9}>.
01/25/16 13:46:41 Prevented process <mpr.dll | C: \ Windows \ System32 \ regsvr32.exe> from launching from <c: \ programdata \ windows genuine advantage \ {2fc7cf8f-f0a9-4af8-9c5e- D707f1f7bb7a}.
01/25/16 13:46:59 Prevented process <appmgr.dll | C: \ Windows \ System32 \ regsvr32.exe> from launching from <c: \ programdata \ windows genuine advantage \ {82b0c380-211c-403d-91c8- 368c2318b9e5}>.