Could hiddenfaxwindow be part of the way Windows reports problems to Microsoft? Does anyone know enough about how that system works to know whether it could be trying to report via fax? Is this configurable? disableable? BTW, I don't have a modem and I've disabled windows fax services.
Another clue: someone suggested looking at the Event Viewer log. I see that every hiddenfaxwindow event is immediately preceded by an "Iap" event and a security center event. Here's a sample of the whole sequence:
Warning 8/5/2005 5:41:50 PM Userenv None 1517 SYSTEM XXX
Information 8/5/2005 4:50:00 PM (MSN/Windows) Messenger Service None 4 N/A XXX
Information 8/5/2005 4:49:43 PM McLogEvent None 5000 SYSTEM XXX
Warning 8/5/2005 4:49:40 PM Microsoft Fax Initialization/Termination 32068 N/A XXX
Warning 8/5/2005 4:49:40 PM Microsoft Fax Initialization/Termination 32026 N/A XXX
Information 8/5/2005 4:49:40 PM SecurityCenter None 1800 N/A XXX
Information 8/5/2005 4:49:36 PM Iap None 0 N/A XXX
This is a Dell Optiplex GX270 with WinXP SP2. The problem occurs with both IE and Firefox. I'm on an ethernet, no phone line, no modem, I've disabled the fax service, and scanned...no spyware found. I tried hitting the emergeny stop button in Zone Alarm to try to break into whatever process is looped. Most other forums on this subject have been quiet, like everyone's stumped.