Zero-Byte Remote Downlevel Documents Appear in Print Queue (312015)
The information in this article applies to:
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
This article was previously published under Q312015 SYMPTOMS
When you print documents from a Windows 2000 Server-based print queue, you may see Remote Downlevel Documents appearing in the print queue. These print jobs may come from other clients in the network. The documents have no information in them and are zero (0) bytes in size. Eventually the documents build up in the print queue and create a blocking situation.
CAUSE
This behavior is caused by the W32.FunLove.4099 virus. The virus scans all shares on all servers on the network. When it finds a share, the virus connects to the share and tries to write to the Windows NT boot files in an attempt to replicate itself onto the server.
When the virus connects to the printer share, the server passes the file handle back to the virus. The virus ignores the file handle and attempts to connect to the boot files directly. Each attempt results in a zero-byte remote downlevel document's being sent to the print queue.
RESOLUTION
To resolve this behavior, remove the virus from any infected clients. For instructions, refer to the Virus Information Library at the McAfee Web site:
Modification Type: | Major | Last Reviewed: | 11/21/2003 |
---|
Keywords: | kb3rdparty kbprb kbprint KB312015 |
---|
|