can't create physical hosting and access "config" for domains

[PascalVermeulen]

Since this morning, accessing the "config" page for an existing domain or trying to access while creating a new domain (after choosing "create physical hosting") I get the following PHP error

Warning: PHostingManager::getPleskStatPDir(class.ProtDir.php) [function.getPleskStatPDir]: failed to open stream: No such file or directory in C:\Program Files\SWSoft\Plesk\admin\plib\class.PHostingManager.php on line 228

Fatal error: PHostingManager::getPleskStatPDir() [function.require]: Failed opening required 'class.ProtDir.php' (include_path='C:\Program Files\SWSoft\Plesk\admin\plib;C:\Program Files\SWSoft\Plesk\admin\plib\api-rpc;C:\Program Files\SWSoft\Plesk\admin\javascripts;C:\Program Files\SWSoft\Plesk\admin\plib\locale;C:\Program Files\SWSoft\Plesk\admin\auto_prepend;C:\Program Files\SWSoft\Plesk\admin\htdocs\domains\databases\phpMyAdmin;C:\Program Files\SWSoft\Plesk\admin\htdocs\domains\databases\phpPgAdmin') in C:\Program Files\SWSoft\Plesk\admin\plib\class.PHostingManager.php on line 228


My Plesk runs on a dedicated server which was put in service on Feb 10th.
- I already ran the autoupdater to get the latest updates.
- I rebooted the server
still no luck

What's going wrong?

 

[Skeeter]

Hi, Pascal

Looks like one of the Plesk files has been lost.
to get it put back by from the installation package, you should use Plesk installation repair.
Go to Add/Remove programs -> Plesk -> Change -> Repair.

Does this help?

 

[PascalVermeulen]

SOLUTIONED - cause unknown

Skeeter,

Thanks for your reply. Since I posted my question, I found the solution (but NOT the cause).

I searched the C drive for the files that were mentioned in the error message. I found them in the cab files for Plesk and had to place 4 files from the cab into the "'C:\Program Files\SWSoft\Plesk\admin\plib" folder.

I finally have the Plesk working again.

But the question remains: why those files got deleted? Same happened with url_protect.dll.

I can't believe the server got hacked or something similar, but I must admit that yesterday I got the "famous" MailEnable-Pop-service-shutting-down-by-itself problem. This can happen when a hacker attacks on the default 110 port. I patched MailEnable with the 2 latest patches as advised on the MailEnable forum. Everything works well, for now.

I checked the server with all the knowledge I have and did not found anything suspect.

Does anyone know a tool that monitors certain file operations (like DELETE)?

I'm investigating right now which antivirus goes best on my server.

Well, lost 5 hours on this, but became a little more experienced with my server & Plesk.

Pascal

 

[Skeeter]

Hello, Pascal

I`m glad you have the files back and Plesk is back running.

As for the reason of the files being lost, this doesn`t happen normally. To make sure only the required users have permission to access Plesk files, you can run Plesk Reconfigurator -> Repair Plesk installation -> Plesk files security.
To monitor file operations, you can use 2 tools:

1. Sysinternals Filemon (found on sysinternals.com). This utility can log all file activity, filtering any specific records.
2. You can use Windows Auditing. This can be switched on from Windwos Explorer: right click a file -> Properties -> Security -> Advanced -> Auditing -> add specific auditing records. The actions will be logged to the security event log.
Be sure to reboot the server to have auditing settings applied.