Okay, I’m part of a team that manages a network for a public school district. Starting last Friday afternoon, we began to see random printers on the network printing junk by the hundreds of pages. The only thing that stopped the job was the printer running out of paper.
Looking at printer logs, these jobs have no originator, date or time info. The only identifing piece of info (on the ones directly plugged in to the network) is they are printed from Port 9100. There are also several printers that are shared which are having the same issue.
We’ve been all over the Internet and found little information – other than the fact that this can happen. We need some help figuring out how to stop the printing! Disabling Port 9100 on the network printers does stop the attack, but there is no such option on the older printers that have been shared. The issue does not seem to discriminate as it has hit Dell, HP Inkjet, HP Laser, and Xerox Laser printers, both old and new. These devices are also in multiple sites/subnets.
Oh yeah…. the only readable text in the printouts is the first line which states “this program does not run in MS DOS..”
