[orb771]

I'm having the same HiddenFaxWindow lockup as described by others. About twice a week some application freezes up, usually the browser (happens on both IE and FF), usu just when I click a link. Then I try to close the browser (either with the close button or via the task manager) and eventually (usually after a very long wait...like 10 mins) it closes. Next, windows asks if I want to report the problem. It doesn't matter if I do or I cancel because the computer stays hung and when the reporting box eventually closes, the hiddenfaxwindow box is underneath it and I'm stuck. Once that windows up, even if I manage to close windows, the window won't go away, it stays up along with my wallpaper. The only way out of it is to hold in the power button. CPU usage sometimes goes to the moon, as others have described, but more often than not it just idles, like its waiting for something to resolve.

Could hiddenfaxwindow be part of the way Windows reports problems to Microsoft? Does anyone know enough about how that system works to know whether it could be trying to report via fax? Is this configurable? disableable? BTW, I don't have a modem and I've disabled windows fax services.

Another clue: someone suggested looking at the Event Viewer log. I see that every hiddenfaxwindow event is immediately preceded by an "Iap" event and a security center event. Here's a sample of the whole sequence:

Warning 8/5/2005 5:41:50 PM Userenv None 1517 SYSTEM XXX
Information 8/5/2005 4:50:00 PM (MSN/Windows) Messenger Service None 4 N/A XXX
Information 8/5/2005 4:49:43 PM McLogEvent None 5000 SYSTEM XXX
Warning 8/5/2005 4:49:40 PM Microsoft Fax Initialization/Termination 32068 N/A XXX
Warning 8/5/2005 4:49:40 PM Microsoft Fax Initialization/Termination 32026 N/A XXX
Information 8/5/2005 4:49:40 PM SecurityCenter None 1800 N/A XXX
Information 8/5/2005 4:49:36 PM Iap None 0 N/A XXX

This is a Dell Optiplex GX270 with WinXP SP2. The problem occurs with both IE and Firefox. I'm on an ethernet, no phone line, no modem, I've disabled the fax service, and scanned...no spyware found. I tried hitting the emergeny stop button in Zone Alarm to try to break into whatever process is looped. Most other forums on this subject have been quiet, like everyone's stumped.

[Advertisements]

Are the timings from ur log same as the time u shutdown ur PC?

[darth_ash]

Are the timings from ur log same as the time u shutdown ur PC?

[orb771]

yes, each event viewer sequence (iap, security center, fax init, mclogevent) coincides with an occurence of the hfw problem and doesn't occur at any other times, nor does the hang occur without appearing in the log. The one or two seconds between events, I can't vouch for, because all I can see when it happens is the hourglass cursor (or is that curser!)

here's three more examples, the second 7/15 occurence has a few more events, reflecting the fact that in my frustration I pushed too many buttons and hung the whole system, including other open applications.

Information 7/18/2005 9:29:10 AM McLogEvent None 5000 SYSTEM XXX
Information 7/18/2005 9:29:03 AM (MSN/Windows) Messenger Service None 4 N/A XXX
Information 7/18/2005 9:28:52 AM McLogEvent None 5000 SYSTEM XXX
Warning 7/18/2005 9:28:50 AM Microsoft Fax Initialization/Termination 32068 N/A XXX
Warning 7/18/2005 9:28:50 AM Microsoft Fax Initialization/Termination 32026 N/A XXX
Information 7/18/2005 9:28:49 AM SecurityCenter None 1800 N/A XXX
Information 7/18/2005 9:28:45 AM Iap None 0 N/A XXX

Information 7/15/2005 5:22:51 PM (MSN/Windows) Messenger Service None 4 N/A XXX
Information 7/15/2005 5:22:40 PM McLogEvent None 5000 SYSTEM XXX
Warning 7/15/2005 5:22:37 PM Microsoft Fax Initialization/Termination 32068 N/A XXX
Warning 7/15/2005 5:22:37 PM Microsoft Fax Initialization/Termination 32026 N/A XXX
Information 7/15/2005 5:22:37 PM SecurityCenter None 1800 N/A XXX
Information 7/15/2005 5:22:33 PM Iap None 0 N/A XXX
Error 7/15/2005 5:15:52 PM Application Hang None 1001 N/A XXX
Error 7/15/2005 5:15:47 PM Application Hang (101) 1002 N/A XXX
Error 7/15/2005 5:15:36 PM Application Hang (101) 1002 N/A XXX
Error 7/15/2005 5:14:33 PM Application Hang (101) 1002 N/A XXX

Information 7/15/2005 10:11:17 AM McLogEvent None 5000 SYSTEM XXX
Information 7/15/2005 9:25:05 AM (MSN/Windows) Messenger Service None 4 N/A XXX
Information 7/15/2005 9:24:54 AM McLogEvent None 5000 SYSTEM XXX
Warning 7/15/2005 9:24:51 AM Microsoft Fax Initialization/Termination 32068 N/A XXX
Warning 7/15/2005 9:24:51 AM Microsoft Fax Initialization/Termination 32026 N/A XXX
Information 7/15/2005 9:24:51 AM SecurityCenter None 1800 N/A XXX
Information 7/15/2005 9:24:47 AM Iap None 0 N/A XXX

[darth_ash]

From Post#1, we will need to stop event:1517 source Userenv.
The generation of this event is the most common cause for slow shutdowns.
So we will get rid of it first.
Download: User Profile Hive Cleanup.

After downloading and running the above tool, do u still face the problem.

P.S.: Since this is a O.S. issue. I requested this topic be moved to the Windows Xp,2000,2003 and NT Forums.

[orb771]

Delayed response was caused by "vacation," an all too rare glitch

I downloaded the hive cleanup tool. The computer hasn't hung since I installed it and rebooted, but that could just be luck. On the other hand, from the event viewer, I see there was the usual double fax event twice today but it appears this time it didn't cause a crash (yet), I guess because the new tool allowed the computer to get back the resources it was trying to use to Fax?

When I click on today's fax events in the event viewer and then clicked on the "properties" button, I got a window that tells me what's going to be sent to Microsoft. Here's what it says regarding the fourth Microsoft Fax event:

Category Initialization/Termination
Company Name Microsoft Corporation
Date 8/25/2005
Event ID 32068
File Name fxsevent.dll
File Version 5.2.2600.2180
Product Name Microsoft R Windows R Operating...
Product Version 5.2.2600.2180
Source Microsoft Fax
Time 10:57:29 AM
Type Warning

Note, the previous event in that pair was at the same second in time, and the info to be sent was identical in all respects except the Event ID was 32026

Here's the entire event log for today up to now (ca. 2:30 EST). I notice that the sequence precedeing the fax call is the same for each: iap, messenger service, security center, McLogEvent, Fax 1, Fax 2, but now does not have the userenv that was appearing before.

Warning 8/25/2005 10:57:29 AM Microsoft Fax Initialization/Termination 32068 N/A XXX
Warning 8/25/2005 10:57:29 AM Microsoft Fax Initialization/Termination 32026 N/A XXX
Information 8/25/2005 10:57:29 AM McLogEvent None 5000 SYSTEM XXX
Information 8/25/2005 10:57:28 AM SecurityCenter None 1800 N/A XXX
Information 8/25/2005 10:57:27 AM (MSN/Windows) Messenger Service None 4 N/A XXX
Information 8/25/2005 10:57:26 AM UPHClean None 1001 N/A XXX
Information 8/25/2005 10:57:22 AM Iap None 0 N/A XXX
Information 8/25/2005 10:56:21 AM UPHClean None 1201 XXX XXX
Information 8/25/2005 10:51:30 AM MsiInstaller None 11707 XXX XXX
Information 8/25/2005 10:51:23 AM UPHClean None 1001 N/A XXX
Information 8/25/2005 9:19:41 AM McLogEvent None 5000 SYSTEM XXX
Warning 8/25/2005 9:18:55 AM Microsoft Fax Initialization/Termination 32068 N/A XXX
Warning 8/25/2005 9:18:55 AM Microsoft Fax Initialization/Termination 32026 N/A XXX
Information 8/25/2005 9:18:55 AM McLogEvent None 5000 SYSTEM XXX
Information 8/25/2005 9:18:54 AM SecurityCenter None 1800 N/A XXX
Information 8/25/2005 9:18:53 AM (MSN/Windows) Messenger Service None 4 N/A XXX
Information 8/25/2005 9:18:48 AM Iap None 0 N/A XXX

[darth_ash]

You said you disabled the Fax Serivce, lets completely un-install it:
Open Control Panel > Add/Remove Programs and click on the Add/Remove Windows Components button on the left side of the window. Un-check the box next to Fax Services and click Next.

[orb771]

Good news: since I disabled the fax service, I haven't had a crash resulting in the Hidden Fax Window window.

Bad news: computer is still crashing about once a day. Now, once all the other applications are ended and I request a system shutdown (all this is much faster now that I'm running the hive cleanup you recommended by the way), I end up with a window saying that "Power Meter" won't close. When I use the end task button on that screen, the screen goes to wallpaper only and the system won't power off.

I looked at the power options in the control panel...during the crashes the settings were:
power scheme "home/office desk", turn monitor off after 20 mins, turn disks off never, system standby after 15 minutes, don't show the power icon on the task bar and don't ask for a password on wakeup, hibernate enabled but set for "never."

In case the problem came from the monitor going off in less time than the system standby, I changed them to 10 and 20 minutes respectively. I also disabled hibernate completely. I asked for a password check after standby just for security.

Any thoughts on whether this is a new symptom of the old problem, now that I've taken away its old faxwindow toy? or is it a new problem?

BTW, there are now no events in the event viewer that appear to coincide with these crashes.

[darth_ash]

If you don't use the Power meter, follow the steps below to disable it:
Control Panel -> Power Options.
When the "Power Options Properties" multi-tabbed dialog box appears, select the "Advanced" tab.
Un-check "Always show icon on the taskbar".
Click "OK" to close the dialog box.

[orb771]

I think I found the problem and have waited lo these many months with no further crashes (at least none resulting in mystery windows like hiddenfaxwindow or power meter. It seems that this computer and another on the lan were both using the default name as the computers' network name with the result that I would periodically lose my IP address. Actually it had to do with the order in which the involved machines were turned on in the building as people came in to work and then turned them off as they went home. We disabled one of the network connections within the local office that was causing explore to crash if my secretary had already gone home for the day and renamed my computer on the network and the problem went away. Why my computer's response to losing its IP address was a complete freeze as it attempted to run modules I never used is anyone's guess and frankly I'm happy now and don't really care. The take away message is, if you're on a network, don't stick with the default settings, and if you have mysterious crashes related to internet use, check to make sure you're keeping an IP address throughout. By the way, thanks Darth, for your help. I learned a lot of useful unrelated stuff.

[adivanfard]

Hi Orb,

I have been having the same problems you described with hidden fax window and my computer crashing.

I read your last comment:

"It seems that this computer and another on the lan were both using the default name as the computers' network name with the result that I would periodically lose my IP address"

I don't know how to change my computer name on the network. Both my dad and I use wireless in the house AND we have vonage so our phone is a part of the whole network (don't know if i worded that right, but basically there's a phone line coming out of our wireless router that our phone runs on).

I'm on wireless channel 11 to prevent any interruption from the phone and my internet connection has been good with really low latency, usually in the 270s.

How do i go about changing the network name of my computer as well as my dads? He runs office 2000 while I run XP.

I don't know much about computers, so your input is much appreciated.

Thanks in advance!

Ali

[Ztruker]

Ali, this is a very old thread, like 1.5 years ago. Not likely to get much attention. I stumbled across it.

To change your computer name, right click on My Computer and select Properties.
Click on the Computer Name tab then the Change button.
Change the name then click Apply and OK as need to exit.

Reboot and it's done.

[adivanfard]

so just changing the computer name will change the network ID?

What about Workgroup? Those need to be the same correct?

[Ztruker]

Yes, workgroup needs to be the same.

[adivanfard]

ok i changed the computer names, hopefully that'll solve the problem.

Thanks for the help!

Ali