Zero-Byte Remote Downlevel Documents Appear in Print Queue

This article was previously published under Q312015
This article has been archived. It is offered "as is" and will no longer be updated.
When you print documents from a Windows 2000 Server-based print queue, you may see Remote Downlevel Documents appearing in the print queue. These print jobs may come from other clients in the network. The documents have no information in them and are zero (0) bytes in size. Eventually the documents build up in the print queue and create a blocking situation.
This behavior is caused by the W32.FunLove.4099 virus. The virus scans all shares on all servers on the network. When it finds a share, the virus connects to the share and tries to write to the Windows NT boot files in an attempt to replicate itself onto the server.

When the virus connects to the printer share, the server passes the file handle back to the virus. The virus ignores the file handle and attempts to connect to the boot files directly. Each attempt results in a zero-byte remote downlevel document's being sent to the print queue.
To resolve this behavior, remove the virus from any infected clients. For instructions, refer to the Virus Information Library at the McAfee Web site:
For additional information about Remote Downlevel Client print jobs, click the article numbers below to view the articles in the Microsoft Knowledge Base:
Q134779 Print Jobs to Windows NT Servers Named 'Remote Downlevel Doc.'
Q137065 Print Jobs Looping Continuously in Print Manager
Q162447 Multiple Print Jobs When Printing Single Document
For information about your hardware manufacturer, visit the following Web site:The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

Article ID: 312015 - Last Review: 12/07/2015 08:08:04 - Revision: 3.3

Microsoft Windows 2000 Server, Microsoft Windows 2000 Advanced Server

  • kbnosurvey kbarchive kb3rdparty kbprb kbprint KB312015