We understood that the problem was not with the mssql.domain_name link but the virus alert only happened after click on ASP .NET Enterprise Manager, Recomended this site. And the link was:

www.referralplanet.com/referral/windows/referralWindow.asp?id=17

Since the site was not hosted with us we had a sigh of relief that the problem is not with the server however we thought we still have a security problem if the link has been injected into ASP .NET Manager site in IIS, may be due to a security issue with Plesk control panel. And after checking several servers we came to know that the problem has happened to the site that is recommended on MSSQL Webadmin site and not the server.

If you want to remove this link from your server as well as from the MSSQL WebAdmin site then follow the steps below:

1. Login into the server through RDP with Administrator user.
2. Go to D:\inetpub\vhosts\sqladmin\mssql\app
3. Open the navbar.aspx page in notepad
4. Go to line number 119 and remove the code below:

<!-- Begin ReferralPlanet.com Referral Script -->
<a onclick="refWindow=window.open('http:// www.referralplanet.com/referral/windows/referralwindow.asp?id=18','referralWindow' ,'width=350,height=520,scrollbars=yes,menubar=no,resizable=yes'); refWindow.focus(); return false;" target=_blank href="http:// www.referralplanet.com/referral/windows/referralWindow.asp?id=17">
<IMG alt="Click Here To Tell A Friend" src="images/tellafriend.gif" border=0></A>
<!-- Begin ReferralPlanet.com Referral Script -->

5. Save the file and exit.

This problem must have infected millions of computer in the world. Let see when chinese hacker stop putting their shit on other’s website and get mature.

There are 3 types of problems with site preview in Plesk:

1. Site Preview in Windows Plesk will show 404 Page Not Found error
2. Site Preview in Windows Plesk will show Plesk Default page.
3. SitePreview will ask for user name and password.

We will troubleshoot each problem with site preview one by one.

1. Site Preview in Plesk will show 404 Page Not Found error.

Cause: This happens if the sitepreview ISAPI DLL is not loaded correctly in IIS web server.

Troubleshoot steps:
a. First check if a the Virtual folder with the name sitepreview is create in IIS Default Web Site. If it is not created then create it without the application pool and map it to folder “%plesk_dir%isapi”, same as in image below.  Also Make sure that Executable Permissions are set to “Scripts And Executables”

b. Make sure that the Site preview ISAPI DDL is Allowed in Web Exteniosn and look like in image below, if not then Add it in Plesk Extensions.  

c. Also make sure that the Site Preview ISAPI DLL has been loaded with green Arrow in IIS >> Web Site >> Right click >> Properties >> ISAPI Tab. like in the figure below. If it is not loaded then just click on the Add button and browser through “%plesk_dir%isapisitepreview.dll” and restart IIS.

d. If you have IIS7 on Windows 2008 Server then make suer that you have Plesk Site Preview DLL added in IIS >> Click on Server >> IIS Group >> ISAPI Filters.

2. Site Preview in Plesk will show Plesk Default page.

Cause: Related to IP configuration on the server.

Troubleshoot steps:

a. Please fo through all the steps in problem one for this. However the only reason for this problem that I have found is main IP address of the server. Just make sure that you have alleast one site added on the main IP address of the server. To know the main IP address of the server Go to START >> Control Panel >> Network Connections >> Right click on main network adapter >> Click on Properties >> Select TCP IP >> Properties. The IP address list in this windows as IP address is the main IP address of the server. Just make sure that you have atleast one site hosted on this IP address.

The above solution will also apply is Plesk Site Preview option is working with https prefix butnot with http in URL browser.

3. SitePreview will ask for user name and password for all website.

Cause: Related to Permissions and Security Options.

Troubleshoot steps:

a. First check if the URL work fine with the IP address only:

http://192.168.1.52/

if not then there are permissions issue with the default site and if you are using a dedicated IP address instead of shared IP then the problem is with the permissions of the site that holds the dedicated IP.

b. If step “a” is working then try access the link below:
http://192.168.1.52/$sitepreview/

The above link should get redirected to the IP address and show Plesk default page or index.html page in Default Web site but it is is asking for password then permissions on sitepreview virtual directory is not correct. Make sure that IIS_WPG, NETWORK SERVICE, psaadm, psacln & psaserv has read an execute permissions on the virtual folder, do not forget to inherit the permissions to files in it.

c. If it asks password for only one site then the problem should be either with the website permissions or the file you are accessing it.

I think this should cover all the problems with Parallels Plesk Site Preview problems. But if you still face problem and don’t want to use Site Preview then you have try the HACK below.

WINDOWS HACK TO POINT YOUR SITE TO AN IP WITHOUT CHANGING THE NAME SERVERS.

While I was searching for the solution I found the KB articel on Parallels sites below:

http://kb.parallels.com/en/1147

Where they (Plesk adminstrators) have clearly mentioned that custom permissions set on top level folder like httpdocs, statistics, cgi-bin etc will get reset by Plesk. So I decided to make a test, I manually gave write permissions to httpdocs folder and ran webservmng.exe on it and yes it was removed. Then after allot digging I would that there us a file .Security which is saved under the folder with the domain name (parallel to httpdocs folder), that stores all permissions for that domain.

Before we start please be informed that these steps are applicable to Parallel Plesk version 8.4 and above as .Security file was introduced in 8.4 only.

So here are steps to get around the problem permanently:

1. Backup the .Security file and delete it from [drive]:inetpub/vhosts/domain_name, this file saves all the permissions assigned to that user from Plesk on Windows. Deleting it will remove all the records.

2. After renaming or deleting the . Security file, run this command below:

"%plesk_bin%/websrvmng.exe" --reconfigure-vhost --vhost-name=domain_name

3. This command will create a new .Security file with all default permissions on that domain.

4. Now login into Plesk >> Click on Domains >> domain_name >> File Manager >> httpdocs >> golden padlock of folder_name to set perm on >> “Advance” Button >> Select users >> Assign permissions >> OK.

These steps will save new permissions in .Security file and even if you run websrvmng on that domain again, the new permissions that has been set from Plesk will not get removed. There is no need to add any special group or users like, ASPNET or NETWORK SERVICE to any folder as those permissions are handled by IUSR_ & IWAM_/IWPD_ users.

Any permissions that has been assigned directly to httpdocs folder will get reset by Plesk and if you inherit them to sub folder, permissions from sub folder will also get removed.

So the moral is, DO NOT give any permissions from RDP, use File Manager option if you want to keep the trouble of permissions away.