标签云
asm恢复 bbed bootstrap$ dul In Memory kcbzib_kcrsds_1 kccpb_sanity_check_2 kfed MySQL恢复 ORA-00312 ORA-00607 ORA-00704 ORA-01110 ORA-01555 ORA-01578 ORA-08103 ORA-600 2131 ORA-600 2662 ORA-600 2663 ORA-600 3020 ORA-600 4000 ORA-600 4137 ORA-600 4193 ORA-600 4194 ORA-600 16703 ORA-600 kcbzib_kcrsds_1 ORA-600 KCLCHKBLK_4 ORA-15042 ORA-15196 ORACLE 12C oracle dul ORACLE PATCH Oracle Recovery Tools oracle加密恢复 oracle勒索 oracle勒索恢复 oracle异常恢复 Oracle 恢复 ORACLE恢复 ORACLE数据库恢复 oracle 比特币 OSD-04016 YOUR FILES ARE ENCRYPTED 勒索恢复 比特币加密文章分类
- Others (2)
- 中间件 (2)
- WebLogic (2)
- 操作系统 (102)
- 数据库 (1,670)
- DB2 (22)
- MySQL (73)
- Oracle (1,532)
- Data Guard (52)
- EXADATA (8)
- GoldenGate (21)
- ORA-xxxxx (159)
- ORACLE 12C (72)
- ORACLE 18C (6)
- ORACLE 19C (14)
- ORACLE 21C (3)
- Oracle 23ai (7)
- Oracle ASM (65)
- Oracle Bug (8)
- Oracle RAC (52)
- Oracle 安全 (6)
- Oracle 开发 (28)
- Oracle 监听 (28)
- Oracle备份恢复 (560)
- Oracle安装升级 (91)
- Oracle性能优化 (62)
- 专题索引 (5)
- 勒索恢复 (78)
- PostgreSQL (18)
- PostgreSQL恢复 (6)
- SQL Server (27)
- SQL Server恢复 (8)
- TimesTen (7)
- 达梦数据库 (2)
- 生活娱乐 (2)
- 至理名言 (11)
- 虚拟化 (2)
- VMware (2)
- 软件开发 (37)
- Asp.Net (9)
- JavaScript (12)
- PHP (2)
- 小工具 (20)
-
最近发表
- ORA-600 krse_arc_complete.4
- Oracle 19c 202410补丁(RUs+OJVM)
- ntfs MFT损坏(ntfs文件系统故障)导致oracle异常恢复
- .mkp扩展名oracle数据文件加密恢复
- 清空redo,导致ORA-27048: skgfifi: file header information is invalid
- A_H_README_TO_RECOVER勒索恢复
- 通过alert日志分析客户自行对一个数据库恢复的来龙去脉和点评
- ORA-12514: TNS: 监听进程不能解析在连接描述符中给出的SERVICE_NAME
- ORA-01092 ORA-00604 ORA-01558故障处理
- ORA-65088: database open should be retried
- Oracle 19c异常恢复—ORA-01209/ORA-65088
- ORA-600 16703故障再现
- 数据库启动报ORA-27102 OSD-00026 O/S-Error: (OS 1455)
- .[metro777@cock.li].Elbie勒索病毒加密数据库恢复
- 应用连接错误,初始化mysql数据库恢复
- RAC默认服务配置优先节点
- Oracle 19c RAC 替换私网操作
- 监听报TNS-12541 TNS-12560 TNS-00511错误
- drop tablespace xxx including contents恢复
- Linux 8 修改网卡名称
标签归档:bootstrap$损坏
恶意删除bootstrap$导致数据库无法正常启动
有客户10.2.0.5的数据库关闭之后,无法正常启动报ORA-00704 ORA-00702错误.使用自研的ORA-702_Recovery Tool小工具可以实现一键恢复,下载地址:ORA-702_Recovery下载
Fri May 18 22:42:26 2018 ALTER DATABASE OPEN Fri May 18 22:42:27 2018 Beginning crash recovery of 1 threads parallel recovery started with 7 processes Fri May 18 22:42:27 2018 Started redo scan Fri May 18 22:42:27 2018 Completed redo scan 1 redo blocks read, 0 data blocks need recovery Fri May 18 22:42:27 2018 Started redo application at Thread 1: logseq 2, block 2, scn 8448162573 Fri May 18 22:42:27 2018 Recovery of Online Redo Log: Thread 1 Group 2 Seq 2 Reading mem 0 Mem# 0: D:\DATABASE\xifenfei\REDO02.LOG Fri May 18 22:42:27 2018 Completed redo application Fri May 18 22:42:27 2018 Completed crash recovery at Thread 1: logseq 2, block 3, scn 8448182575 0 data blocks read, 0 data blocks written, 1 redo blocks read Fri May 18 22:42:28 2018 LGWR: STARTING ARCH PROCESSES ARC0 started with pid=23, OS id=3188 ARC1 started with pid=24, OS id=3168 ARC2 started with pid=25, OS id=996 ARC3 started with pid=26, OS id=432 ARC4 started with pid=27, OS id=3728 Fri May 18 22:42:28 2018 ARC0: Archival started ARC1: Archival started ARC5 started with pid=28, OS id=2876 Fri May 18 22:42:28 2018 ARC2: Archival started ARC3: Archival started ARC4: Archival started ARC5: Archival started LGWR: STARTING ARCH PROCESSES COMPLETE Fri May 18 22:42:28 2018 Thread 1 advanced to log sequence 3 (thread open) Thread 1 opened at log sequence 3 Current log# 3 seq# 3 mem# 0: D:\DATABASE\xifenfei\REDO03.LOG Successful open of redo thread 1 Fri May 18 22:42:28 2018 MTTR advisory is disabled because FAST_START_MTTR_TARGET is not set Fri May 18 22:42:28 2018 ARC0: Becoming the 'no FAL' ARCH ARC0: Becoming the 'no SRL' ARCH Fri May 18 22:42:28 2018 ARC2: Becoming the heartbeat ARCH Fri May 18 22:42:28 2018 SMON: enabling cache recovery Fri May 18 22:42:28 2018 Errors in file d:\oracle\product\10.2.0\admin\xifenfei\udump\xifenfei_ora_3148.trc: ORA-00704: 引导程序进程失败 ORA-00702: 引导程序版本 '' 与版本 '8.0.0.0.0' 不一致 Fri May 18 22:42:28 2018 Error 704 happened during db open, shutting down database USER: terminating instance due to error 704 Instance terminated by USER, pid = 3148 ORA-1092 signalled during: ALTER DATABASE OPEN...
根据以前恢复经验ORA-00702: bootstrap verison ” inconsistent with version ’8.0.0.0.0′,很可能是由于bootstrap$表异常了.
通过dbv检查system文件确认没有坏块
通过bbed分析,确认记录被删除
把数据文件拷贝到本地,通过bbed进行分析,确认记录丢失
BBED> map File: d:/system01.dbf (0) Block: 379 Dba:0x00000000 ------------------------------------------------------------ KTB Data Block (Table/Cluster) struct kcbh, 20 bytes @0 struct ktbbh, 48 bytes @20 struct kdbh, 14 bytes @68 struct kdbt[1], 4 bytes @82 sb2 kdbr[24] @86 ub1 freespace[1158] @134 ub1 rowdata[6896] @1292 ub4 tailchk @8188 BBED> p *kdbr[0] rowdata[6875] ------------- ub1 rowdata[6875] @8167 0x3c BBED> x /rnnc rowdata[6875] @8167 ------------- flag@8167: 0x3c (KDRHFL, KDRHFF, KDRHFD, KDRHFH) lock@8168: 0x01 cols@8169: 0
故障原因跟踪
有人在数据库中注入了恶意脚本,导致数据库删除了bootstrap$中数据,关闭之后无法正常启动
处理方法
通过oracle bbed 修复数据字典,正常启动数据库