This is the third time I am posting this question as last two times it just vanished from the forum. In case the moderators are deleting it, please let me know the reason for that.
I was looking for something using Process Monitor and came across these:
9:18:50.7032220 AM 0.0000217
w3wp.exe RegOpenKey HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
ACCESS DENIED Desired Access: Read/Write
c:\windows\system32\inetsrv\w3wp.exe -ap "ASP.NET v4.0 Classic" -v "v4.0" -l "webengine4.dll" -a \\.\pipe\iisipmfe2ae280-15c9-4c86-a961-4f6243eb44e0 -h "C:\inetpub\temp\apppools\ASP.NET v4.0 Classic\ASP.NET v4.0 Classic.config" -w "" -m 1
9:18:50.7032740 AM < ...
Go to the complete details ...