This article was previously published under Q312015
When you print documents from a Windows 2000 Server-based print queue, you may see Remote Downlevel Documents appearing in the print queue. These print jobs may come from other clients in the network. The documents have no information in them and are zero (0) bytes in size. Eventually the documents build up in the print queue and create a blocking situation.
This behavior is caused by the W32.FunLove.4099 virus. The virus scans all shares on all servers on the network. When it finds a share, the virus connects to the share and tries to write to the Windows NT boot files in an attempt to replicate itself onto the server.
When the virus connects to the printer share, the server passes the file handle back to the virus. The virus ignores the file handle and attempts to connect to the boot files directly. Each attempt results in a zero-byte remote downlevel document's being sent to the print queue.
To resolve this behavior, remove the virus from any infected clients. For instructions, refer to the Virus Information Library at the McAfee Web site:
The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.
Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.