I have a Win Small Business Server 2003 box that has started regularly logging event ID 1022, "Failed to CoCreate profiler". There's no obvious pattern to when this happens, other than several times a day; I have a suspicion it could be related to IIS worker process recycles, but can't be sure.
I understand from http://blogs.msdn.com/b/dougste/archive/2009/12/30/failed-to-cocreate-profiler.aspx that this is logged when the CLR tries to start a profiler. Trouble is, I've no knowledge of a profiler ever having been used on this box, nor can I find any evidence of one in the registry (looking for COR_ENABLE_PROFILING in environment variables).
How can I track down the source of a profiler that the CLR might be looking for?