Cannot Log In to Control Panel

[kleroy]

Upon login I get OPERATION FAILED:

The operation you were performing failed. You can retry the operation with or without changing its parameters. You may also want to report this problem to our support so that we could help you as soon as possible.

Server and services have been restarted, have tried the delete sessions, to no avail. HELP!!!

DefPackageMng() constructor failed: defpackagemng failed: Access is denied. (Error code 5) at CreateProcess 'C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\SWsoft\Plesk\admin\bin\defpackagemng.exe" --get"'
at execUtil C:\Program Files\SWsoft\Plesk\admin\bin\defpackagemng.exe --get on C:\Program Files\SWsoft\Plesk\admin(PleskSrvClient::execUtil line 420)
at execute console command --get(vconsoleapp::start line 128)
at execute "C:\Program Files\SWsoft\Plesk\/admin/bin/defpackagemng" --get(vconsoleapp::run line 138)
---------------------- Debug Info -------------------------------
0: C:\Program Files\SWsoft\Plesk\admin\plib\class.DefPackageMng.php:14 psaerror(string "DefPackageMng() constructor failed: defpackagemng failed: Access is denied. (Error code 5) at CreateProcess 'C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\SWsoft\Plesk\admin\bin\defpackagemng.exe" --get"'
at execUtil C:\Program Files\SWsoft\Plesk\admin\bin\defpackagemng.exe --get on C:\Program Files\SWsoft\Plesk\admin(PleskSrvClient::execUtil line 420)
at execute console command --get(vconsoleapp::start line 128)
at execute "C:\Program Files\SWsoft\Plesk\/admin/bin/defpackagemng" --get(vconsoleapp::run line 138)")
1: C:\Program Files\SWsoft\Plesk\admin\plib\class.ActionLog.php:426 defpackagemngmaker()
2: C:\Program Files\SWsoft\Plesk\admin\plib\cmd_loginup.php:235 actionlog->submit()
3: C:\Program Files\SWsoft\Plesk\admin\plib\cmd_loginup.php:99 createsessionadmin(string "admin", string "XXXX", boolean true)
4: C:\Program Files\SWsoft\Plesk\admin\htdocs\login_up.php3:51 createsession(string "admin", string "XXXX")

 

[madmatt]

Hi,

I'm getting the same problem: when I try to log to control panel I get :

DefPackageMng() constructor failed: defpackagemng failed: Access is denied. (Error code 5) at CreateProcess 'C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\SWsoft\Plesk\admin\bin\defpackagemng.exe" --get"'
at execUtil C:\Program Files\SWsoft\Plesk\admin\bin\defpackagemng.exe --get on C:\Program Files\SWsoft\Plesk\admin(PleskSrvClient::execUtil line 420)
at execute console command --get(vconsoleapp::start line 128)
at execute "C:\Program Files\SWsoft\Plesk\/admin/bin/defpackagemng" --get(vconsoleapp::run line 138)
---------------------- Debug Info -------------------------------
0: C:\Program Files\SWsoft\Plesk\admin\plib\class.DefPackageMng.php:14 psaerror(string "DefPackageMng() constructor failed: defpackagemng failed: Access is denied. (Error code 5) at CreateProcess 'C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\SWsoft\Plesk\admin\bin\defpackagemng.exe" --get"'
at execUtil C:\Program Files\SWsoft\Plesk\admin\bin\defpackagemng.exe --get on C:\Program Files\SWsoft\Plesk\admin(PleskSrvClient::execUtil line 420)
at execute console command --get(vconsoleapp::start line 128)
at execute "C:\Program Files\SWsoft\Plesk\/admin/bin/defpackagemng" --get(vconsoleapp::run line 138)")
1: C:\Program Files\SWsoft\Plesk\admin\htdocs\server\defaultcomponents.php:9 defpackagemngmaker()

I tried to reconfigure plesk, correct permissions, run "defpackagemng --repair" (I get the same access denied error).

I tried to reinstall plesk many times but it didn't work (I get error messages with the same "access denied"). I even tried to uninstall this #### software but I get an error telling me that the package for mail enable is corrupt....

Finally, I sent an error report to plesk and got this:
******************
Hello

Try to use the following command from command line:

>"%plesk_bin%\defpackagemng.exe" --fix

Also try to use Plesk Reconfigurator (Start -> Program Files -> SWsoft -> Plesk -> Plesk Reconfigurator)

Check that psaadm and psaserv have permissions to file %windows%\system32\cmd.exe

However if my advices doesn't help you, then we need to investigate this issue from the server side. If you'd like we do it so please acquaint with text bellow.

...follows text with support price
*******************

Can anyone help with this issue?

Thanx a lot,

Matt

 

[babushka99]

This is definitely a permissions error. We went through two days of agony, and you what it was - permissions.

How did permissions get changed you ask - trojans!!!!

Here is what we did (with help from Plesk):

The reason of the problem was in denied rights to C:WINDOWSsystem32cmd.exe file
to SYSTEM account. I've gave FULL CONTROLL to SYSTEM account to that file and after
that was able to log into Plesk.
But the situation is not clear. We don't know was it done manually or viruses did that.
I should say that I've found viruses on your server.
I've found them by the following utility:
http://download.drweb.com/drweb+cureit/
They are:
Backdoor.HacDef.100
Backdoor.WinShell.50
Trojan.Aphex.71


I STRONLY suggest you download the Dr.Web cure it and run it - and then do what it says above. I am very confident it will resolve your problem.

 

[madmatt]

Many many thanks babushka99 !!!

I was stupid enough not to look in the detailed permissions for SYSTEM on cmd.exe. In fact they were all blocked.

I gave full rights and it works:

I discovered a Trojan two days ago. It ran under dhcpcl.exe and netloggerui.exe. The bad guy added two admin accounts; ThorZ and system32 and a hidden ftp server.

I hope I removed all of his **** but I am now running Dr Web's CureIt following your advice...

I'll post any found viruses on this thread.

Life is suddenly brighter!

 

[babushka99]

So glad it worked for you. I know what that feeling can be. Yeah - do a full run on Dr. Web, its worth it.

 

[Tiago@]

Also worked for me.

I'm running a full Dr. Web scan right now.

This happens to me when i changed the administrador password.

 

[systron]

Use Dr Web Carefully

Use DR Web Cureit Carefully, It some times deletes winreg.exe , system never boots after that. So be carefull.

I had Asked Plesk Support many times, Why and How cmd.exe System permission are removed on number of times, despite that I have F Secure AV, and Reinsatlled Win3k Many times.

There Seems some bug with Plesk, oe a hole with Win3k ? But there must be some be some answer.

 

[babushka99]

Never had a satisfactory answer from Plesk. They are too stumped about it. Seriously.

I don't think they have a clue as to why permissions get changed.

 

[Anjari]

hmmm

This happened to me today (thanks for posting the fix) cant seem to figure out why MY System permissions all the sudden were changed to DENY? Anyone figure out what may be causing this? Do I need to worry?

Thanks!

 

[oliew]

this happened to me

only advice my hosting people was to reinstall the VDS private server?!!!
i have many websites on there and plesk backup wont even run beacuse of this cmd.exe problem.

i can see the permissions to DENY on cmd.exe but cant change them back as its greyed out.

im running dr web as we speak, it has found some virus on svchost.exe which is worrying.

Oli

 

[oliew]

wierd DENY all

for anyone struggling i fixed this
copy cmd.exe to c:\
rename cmd.exe in windows/system32
set the permissions in cmd.exe in c:\ to allow all for system.
then copy back into the dir, a reboot may be neccesary but it worked for me!
Oli

 

[Manojb]

Hey,

The error message simply comes up as the cmd.exe does not have the permissions. so RDP the server, and:

1) go to the folder where the cmd.exe resides.

cd C:\WINDOWS\system32

right click the cmd.exe file >> properties >> add the full permissions to the users, especially the user: system

then restart your plesk control panel and then try back.
Hope the error message has gone and you can now use your CP.