Skip To Main Content

Beaverton Schools

It may also belong to a legitimate but obscure component. However, a known legitimate mapping is not widely documented. Always verify with the software vendor or via VirusTotal.

The CLSID 86CA1AA0-34AA-4e8B-A509-50C905BAE2A2 is not a standard Microsoft system CLSID (most well-known ones, like shell folders, are documented). A quick search suggests this CLSID might be:

Important: Before modifying any CLSID, you should export the original key:

reg export "HKCU\Software\Classes\CLSID\86CA1AA0-34AA-4e8B-A509-50C905BAE2A2" backup.reg

Or if it exists in HKLM:

reg export "HKLM\Software\Classes\CLSID\86CA1AA0-34AA-4e8B-A509-50C905BAE2A2" backup.reg

Note: Always quote paths with spaces and include the braces {} around the GUID.

A CLSID is a globally unique identifier (GUID) that identifies a COM class. This specific GUID appears in several contexts:

To add the registry key that enables the classic context menu, you can run this command from an elevated Command Prompt (run as Administrator):

reg add HKCU\Software\Classes\CLSID\86ca1aa0-34aa-4e8b-a509-50c905bae2a2\InprocServer32 /ve /d "" /f

Note: your original quoted text had spacing and flag abbreviations; the canonical reg.exe syntax above is what to copy and paste.

reg add hkcu software classes clsid 86ca1aa0-34aa-4e8b-a509-50c905bae2a2 inprocserver32 ve d f

Attackers frequently abuse HKCU\Software\Classes\CLSID because:

For instance, malware might add a CLSID that points to its malicious DLL under InprocServer32. Then, whenever a specific action (e.g., opening a ZIP file or clicking a link) occurs, Windows loads the malware.