Solved

Shoreware Services wont Start

Posted on 2014-03-14
8
1,801 Views
Last Modified: 2014-03-23
Hi
We have a shoretel shoreware director server that has not come back happy after a dirty shutdown.
A number of the services will not start, we have run a repair install which has assisted however many will still not start due to a dependency fail.

The ShoreWare TDI Media Driver service failed to start due to the following error:
The system cannot find the file specified.

The ShoreWare Workgroup Server service depends on the ShoreTel group and no member of this group started.

Any support would be appreciated as not much is forthcoming from the vendor.
0
Comment
Question by:michael334
  • 4
  • 4
8 Comments
 
LVL 23

Expert Comment

by:Mohammed Hamada
ID: 39934497
You might have had the file malfunctioned during the dirty shutdown. I think in your case a repair installation will do it.

In the logs you could find the specific TDI file that needs recovery.
0
 

Author Comment

by:michael334
ID: 39935172
Hi
We have run an install / repair of the application with no changes, i have a newer version (13) but am unsure of the upgrade path.
0
 
LVL 23

Expert Comment

by:Mohammed Hamada
ID: 39935443
Can you attach the logs here please if there's any errors recently reported?
0
 

Author Comment

by:michael334
ID: 39935616
After the repair of the software the following is the first event that is generated.

The ShoreWare TDI Media Driver service failed to start due to the following error:
The system cannot find the file specified.

The rest are failures as they are dependent on this service.

The confusing part is the absence of a service called ShoreWare TDI Media Driver service, snapshot of the services attached.
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 23

Expert Comment

by:Mohammed Hamada
ID: 39936240
Since the file is not there and the service as well then I would suppose that your system is infected with a root/virus or trojan.

Please download malware bytes, install, update it and then run a full scan on your server/PC thats running the Shoreware.

https://www.malwarebytes.org/

I would highly recommend that before you make any changes you take a backup of your settings just in case things got worse you can re-install and get things as it was.

Download Super Antisypware free edition and run it on the same machine.
http://www.superantispyware.com/?rid=3324

Make sure your windows host file is not changed by the malware. you can find the hosts file located in the following path.
Please open it and attach the content here

%systemroot%\system32\drivers\etc

If there's any sign of infection we'll go further with this. if not then I would recommend you to contact Shortel support.
0
 

Author Comment

by:michael334
ID: 39936247
Thanks for the response,

First thing done was check of infection, we use the above tools, all scanned ok.

Shoretel recommend rebuild server and re-install which is not an easy proposition thus the request for support

.
0
 
LVL 23

Accepted Solution

by:
Mohammed Hamada earned 500 total points
ID: 39937475
Some malware can't be easily detected really as they operate in low level in the Operating system! They integrate them selves within some system attributed files and therefore scanners can't easily access them.

I would advise you to use combofix if it's compatible with windows server edition but I know it only works on the end user windows version.

I think your only solution is to re-install.
0
 

Author Closing Comment

by:michael334
ID: 39949184
System is unable to be repaired to re-install is required.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

As companies replace their old PBX phone systems with Unified IP Communications, many are finding out that legacy applications such as fax do not work well with VoIP. Fortunately, Cloud Faxing provides a cost-effective alternative that works over an…
What do we know about Legacy Video Conferencing? - Full IT support needed! - Complicated systems at outrageous prices! - Intense training required! Highfive believes we need to embrace a new alternative.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now