Being in the Temp folder (for a dll file) would be something considered suspicious to start with as it is also trying to modify system settings and that has probably cumulated in the alert/block.

I take it that this was around the time of a windows update, which included .net ?