标签云
asm恢复 bbed bootstrap$ dul In Memory kcbzib_kcrsds_1 kccpb_sanity_check_2 MySQL恢复 ORA-00312 ORA-00607 ORA-00704 ORA-00742 ORA-01110 ORA-01555 ORA-01578 ORA-01595 ORA-08103 ORA-600 2131 ORA-600 2662 ORA-600 3020 ORA-600 4000 ORA-600 4137 ORA-600 4193 ORA-600 4194 ORA-600 16703 ORA-600 kcbzib_kcrsds_1 ORA-600 KCLCHKBLK_4 ORA-15042 ORA-15196 ORACLE 12C oracle dul ORACLE PATCH Oracle Recovery Tools oracle加密恢复 oracle勒索 oracle勒索恢复 oracle异常恢复 Oracle 恢复 ORACLE恢复 ORACLE数据库恢复 oracle 比特币 OSD-04016 YOUR FILES ARE ENCRYPTED 勒索恢复 比特币加密文章分类
- Others (2)
- 中间件 (2)
- WebLogic (2)
- 操作系统 (103)
- 数据库 (1,772)
- DB2 (22)
- MySQL (77)
- Oracle (1,612)
- Data Guard (52)
- EXADATA (8)
- GoldenGate (24)
- ORA-xxxxx (166)
- ORACLE 12C (72)
- ORACLE 18C (6)
- ORACLE 19C (15)
- ORACLE 21C (3)
- Oracle 23ai (8)
- Oracle ASM (69)
- Oracle Bug (8)
- Oracle RAC (54)
- Oracle 安全 (6)
- Oracle 开发 (28)
- Oracle 监听 (29)
- Oracle备份恢复 (593)
- Oracle安装升级 (98)
- Oracle性能优化 (62)
- 专题索引 (5)
- 勒索恢复 (86)
- PostgreSQL (31)
- pdu工具 (6)
- PostgreSQL恢复 (10)
- SQL Server (32)
- SQL Server恢复 (13)
- TimesTen (7)
- 达梦数据库 (3)
- 达梦恢复 (1)
- 生活娱乐 (2)
- 至理名言 (11)
- 虚拟化 (2)
- VMware (2)
- 软件开发 (39)
- Asp.Net (9)
- JavaScript (12)
- PHP (2)
- 小工具 (22)
-
最近发表
- 由于空间满导致PostgreSQL数据库异常处理
- 一次非常幸运的ORA-600 16703(tab$被清空)故障恢复
- Oracle 19c 202507补丁(RUs+OJVM)-19.28
- 2025年的Oracle 8.0.5数据库恢复
- ORA-600 kokiasg1故障分析(obj$中核心字典序列全部被恶意删除)
- ORA-00756 ORA-10567故障数据0丢失恢复
- 数据库文件变成32k故障恢复
- tcp连接过多导致监听TNS-12532 TNS-12560 TNS-00502错误
- 文件系统格式化MySQL数据库恢复
- .sstop勒索加密数据库恢复
- 解决一次硬件恢复之后数据文件0kb的故障恢复case
- Error in invoking target ‘libasmclntsh19.ohso libasmperl19.ohso client_sharedlib’问题处理
- ORA-01171: datafile N going offline due to error advancing checkpoint
- linux环境oracle数据库被文件系统勒索加密为.babyk扩展名溯源
- ORA-600 ksvworkmsgalloc: bad reaper
- ORA-600 krccfl_chunk故障处理
- Oracle Recovery Tools恢复案例总结—202505
- ORA-600 kddummy_blkchk 数据库循环重启
- 记录一次asm disk加入到vg通过恢复直接open库的案例
- CHECKDB 发现了 N 个分配错误和 M 个一致性错误
年归档:2021
19c sqlplus / as sysdba 登录慢分析
sqlplus / as sysdba登录非常慢
[oracle@xifenfei trace]$ date Fri Oct 29 00:04:27 CST 2021 [oracle@xifenfei trace]$ sqlplus / as sysdba<< EOF > exit; > EOF SQL*Plus: Release 19.0.0.0.0 - Production on Fri Oct 29 00:04:28 2021 Version 19.3.0.0.0 Copyright (c) 1982, 2019, Oracle. All rights reserved. Connected to: Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 - Production Version 19.3.0.0.0 SQL> Disconnected from Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 - Production Version 19.3.0.0.0 [oracle@xifenfei trace]$ date Fri Oct 29 00:04:49 CST 2021
sqlpus 一个简单的登录+退出使用了22秒,严重的慢,通过strace分析发现访问以下两个ip,但是10.11.0.41非常慢,10.13.0.41很快,并且通过一些信息53端口,判断可能是dns服务器的ip
connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("10.13.0.41")}, 16) = 0 connect(12, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("10.11.0.41")}, 16) = 0
进一步确认,确认是该服务器配置的dns服务器
[root@xifenfei ~]# cat /etc/resolv.conf # Generated by NetworkManager nameserver 10.13.0.41 nameserver 10.11.0.41
对这两个ip的连通性进行测试
[root@xifenfei ~]# ping 10.13.0.41 PING 10.13.0.41 (10.13.0.41) 56(84) bytes of data. 64 bytes from 10.13.0.41: icmp_seq=1 ttl=126 time=0.616 ms ^C --- 10.13.0.41 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.616/0.616/0.616/0.000 ms [root@xifenfei ~]# ping 10.11.0.41 PING 10.11.0.41 (10.11.0.41) 56(84) bytes of data. ^C --- 10.11.0.41 ping statistics --- 3 packets transmitted, 0 received, 100% packet loss, time 2063ms [root@xifenfei ~]#
确认10.11.0.41 ip不通,对于此类问题最快的解决方案就是除掉不可使用的dns服务器,然后测试登录和退出时间
[oracle@xifenfei trace]$ date Fri Oct 29 00:21:12 CST 2021 [oracle@xifenfei trace]$ sqlplus / as sysdba<< EOF > exit; > EOF SQL*Plus: Release 19.0.0.0.0 - Production on Fri Oct 29 00:21:12 2021 Version 19.3.0.0.0 Copyright (c) 1982, 2019, Oracle. All rights reserved. date Connected to: Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 - Production Version 19.3.0.0.0 SQL> Disconnected from Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 - Production Version 19.3.0.0.0 [oracle@xifenfei trace]$ date Fri Oct 29 00:21:13 CST 2021
通过除掉不可用的dns服务器ip之后,测试时间为1s,恢复正常
最近几种勒索病毒加密数据库可完美恢复
最近有一些朋友咨询了几种oracle数据库被加密的勒索病毒,我们都可以通过工具修复实现数据库直接open,数据使用exp/expdp导出,实现数据近似完美恢复,业务直接测试正常,远比各种工具直接导出数据效果要好很多.比如以下几种:
.id[A6B00388-2930].[Ransomwaree2020@cock.li].eking
.id[BCD26C0D-3009].[decrypt20@firemail.cc].eking

.hospitalhelper.17E-D66-320

对于类似这些病毒,我们可以通过工具修复实现数据库直接open

如果此类的数据库(oracle,mysql,sql server)等被加密,需要专业恢复技术支持,请联系我们:
电话/微信:17813235971 Q Q:107644445

发表在 勒索恢复
标签为 decrypt20@firemail.cc, eking, hospitalhelper, Ransomwaree2020@cock.li, 勒索oracle恢复, 勒索恢复
评论关闭
Assistant: Download Reference for Oracle Database/GI PSU, SPU(CPU), Bundle Patches, Patchsets and Base Releases-202110
|
|
19.0.0.0 | |||
Description | Database Update | GI Update | Windows Bundle Patch |
OCT2021(19.13.0.0.0) | 33192793 | 33182768 | 33155330 |
JUL2021 (19.12.0.0.0) | 32904851 | 32895426 | 32832237 |
APR2021 (19.11.0.0.0) | 32545013 | 32545008 | 32409154 |
JAN2021 (19.10.0.0.0) | 32218454 | 32226239 | 32062765 |
OCT2020 (19.9.0.0.0) | 31771877 | 31750108 | 31719903 |
JUL2020 (19.8.0.0.0) | 31281355 | 31305339 | 31247621 |
APR2020 (19.7.0.0.0) | 30869156 | 30899722 | 30901317 |
JAN2020 (19.6.0.0.0) | 30557433 | 30501910 | 30445947 |
OCT2019 (19.5.0.0.0) | 30125133 | 30116789 | 30151705 |
JUL2019 (19.4.0.0.0) | 29834717 | 29708769 | NA |
APR2019 (19.3.0.0.0) | 29517242 | 29517302 | NA |
18.0.0.0 | |||
Description | OJVM Update | OJVM + DB Update | OJVM + GI Update |
APR2021 (18.14.0.0.210420) | 32552752 | 32579022 | 32579024 |
JAN2021 (18.13.0.0.210119) | 32119939 | 32126855 | 32126862 |
OCT2020 (18.12.0.0.201020) | 31668892 | 31720435 | 31720457 |
JUL2020 (18.11.0.0.200714) | 31219909 | 31326374 | 31326376 |
APR2020 (18.10.0.0.200414) | 30805598 | 30783603 | 30783607 |
JAN2020 (18.9.0.0.200114) | 30501926 | 30463620 | 30463635 |
OCT2019 (18.8.0.0.191015) | 30133603 | 30133203 | 30133246 |
JUL2091 (18.7.0.0.190716) | 29774410 | 29699112 | 29699160 |
APR2019 (18.6.0.0.190416) | 29249584 | 29249695 | 29251992 |
JAN2019 (18.5.0.0.190115) | 28790647 | 28980087 | 28980105 |
OCT2018 (18.4.0.0.181016) | 28502229 | 28689117 | 28689122 |
JUL2018 (18.3.0.0.180717) | 27923415 | 28317326 | 28317346 |
APR2018 (18.2.0.0.180417) | 27636900 | 27726465 | 27726470 |
18.0.0.0 | |||
Description | Database Update | GI Update | Windows Bundle Patch |
APR2021 (18.14.0.0.0) | 32524155 | 32524152 | 32438481 |
JAN2021 (18.13.0.0.0) | 32204699 | 32226219 | 32062760 |
OCT2020 (18.12.0.0.0) | 31730250 | 31748523 | 31629682 |
JUL2020 (18.11.0.0.0) | 31308624 | 31305362 | 31247612 |
APR2020 (18.10.0.0.0) | 30872794 | 30899645 | 30901451 |
JAN2020 (18.9.0.0.0) | 30480385 | 30480702 | 30445951 |
OCT2019 (18.8.0.0.0) | 30112122 | 30116795 | 30150321 |
JUL2019 (18.7.0.0.0) | 29757256 | 29708703 | 29859180 |
APR2019 (18.6.0.0.0) | 29301631 | 29301682 | 29589622 |
JAN2019 (18.5.0.0.0) | 28822489 | 28828717 | 29124511 |
OCT2018 (18.4.0.0.0) | 28655784 | 28659165 | NA |
JUL2018 (18.3.0.0.0) | 28090523 | 28096386 | NA |
APR2018 (18.2.0.0.0) | 27676517 | 27681568 | NA |
12.2.0.1 | ||||
Description | OJVM Update | OJVM Windows Bundle Patch | Combo OJVM + DB Update | Combo OJVM + GI Update |
OCT2021 (12.2.0.1.211019) | 33192662 | 33248852 | 33248521 | 33248546 |
JUL2021 (12.2.0.1.210720) | 32876409 | 32905896 | 32900144 | 32900156 |
APR2021 (12.2.0.1.210420) | 32473172 | 32427674 | 32579049 | 32579057 |
JAN2021 (12.2.0.1.210119) | 32119931 | 32142294 | 32126871 | 32226491 |
OCT2020 (12.2.0.1.201020) | 31668898 | 31740064 | 31720473 | 31720486 |
JUL2020 (12.2.0.1.200714) | 31219919 | 31465105 | 31326379 | 31326390 |
APR2020 (12.2.0.1.200414) | 30805580 | 31035002 | 30783641 | 30783652 |
JAN2020 (12.2.0.1.200114) | 30502018 | 30525838 | 30463660 | 30463673 |
OCT2019 (12.2.0.1.191015) | 30133625 | 30268021 | 30133374 | 30133386 |
JUL2019 (12.2.0.1.190716) | 29774415 | 29837425 | 29699168 | 29699173 |
APR2019 (12.2.0.1.190416) | 29249637 | 29281550 | 29252035 | 29252072 |
JAN2019 (12.2.0.1.190115) | 28790651 | 28994068 | 28980102 | 28980109 |
NOV2018 (12.2.0.1.181130) | NA | 28412314 | NA | NA |
OCT2018 (12.2.0.1.181016) | 28440725 | 28412312 | 28689128 | 28689130 |
JUL2018 (12.2.0.1.180717) | 27923353 | 28135129 | 28317292 | 28317269 |
APR2018 (12.2.0.1.180417) | 27475613 | 27650410 | 27726453 | 27726454 |
JAN2018 (12.2.0.1.180116) | 27001739 | 27162975 | 27010695 | 27010711 |
OCT2017 (12.2.0.1.171017) | 26635944 | 26792369 | 26636004 | 26636246 |
AUG2017 (12.2.0.1.170814) | N/A | 26565082 | 26550033 | 26550314 |
JUL2017 (12.2.0.1.170718) | 25811364 | 26182467 | 26146314 | 26146318 |
12.2.0.1 | |||
Description | Database Update | GI Update | Windows Bundle Patch |
OCT2021 (12.2.0.1.211019) | 33261817 | 33290750 | 33174380 |
JUL2021 (12.2.0.1.210720) | 32916808 | 32928749 | 32775037 |
APR2021 (12.2.0.1.210420) | 32507738 | 32540149 | 32392089 |
JAN2021 (12.2.0.1.210119) | 32228578 | 32226491 | 31987852 |
OCT2020 (12.2.0.1.201020) | 31741641 | 31750094 | 31654782 |
JUL2020 (12.2.0.1.200714) | 31312468 | 31305382 | 31210848 |
APR2020 (12.2.0.1.200414) | 30886680 | 30920127 | 30861472 |
JAN2020 (12.2.0.1.200114) | 30593149 | 30501932 | 30446296 |
OCT2019 (12.2.0.1.191015) | 30138470 | 30116802 | 30150416 |
JUL2019 (12.2.0.1.190716) | 29757449 | 29708720 | 29832062 |
APR2019 (12.2.0.1.190416) | 29314339 | 29301687 | 29394003 |
JAN2019 (12.2.0.1.190115) | 28822515 | 28828733 | 28810696 |
NOV2018 (12.2.0.1.181130) | NA | NA | 28810550 (64bit) |
OCT2018 (12.2.0.1.181016) | 28662603 | 28714316 | 28574555 |
JUL2018 (12.2.0.1.180717) | 28163133 | NA | 27937914 |
APR2018 (12.2.0.1.180417) | 27674384 | 27468969 | 27426753 |
JAN2018 (12.2.0.1.180116) | 27105253 | 27100009 | 27162931 |
NOV2017 (12.2.0.1.171121) | NA | 27010638 | NA |
OCT2017 (12.2.0.1.171017) | 26710464 | 26737266 | 26758841 |
AUG2017 (12.2.0.1.170814) | 26609817 | 26610291 | 26204214 |
JUL2017 (12.2.0.1.170718) | 26123830 | 26133434 | 26204212 |
参考:Assistant: Download Reference for Oracle Database/GI Update, Revision, PSU, SPU(CPU), Bundle Patches, Patchsets and Base Releases (Doc ID 2118136.2)