标签云
asm恢复 bbed bootstrap$ dul kcbzib_kcrsds_1 kccpb_sanity_check_2 kcratr_nab_less_than_odr MySQL恢复 ORA-00312 ORA-00704 ORA-00742 ORA-01110 ORA-01200 ORA-01555 ORA-01578 ORA-01595 ORA-600 2662 ORA-600 3020 ORA-600 4000 ORA-600 4137 ORA-600 4193 ORA-600 4194 ORA-600 16703 ORA-600 kcbzib_kcrsds_1 ORA-600 KCLCHKBLK_4 ORA-600 kcratr_nab_less_than_odr ORA-600 kdsgrp1 ORA-15042 ORA-15196 ORACLE 12C oracle dul ORACLE PATCH Oracle Recovery Tools oracle加密恢复 oracle勒索 oracle勒索恢复 oracle异常恢复 ORACLE恢复 Oracle 恢复 ORACLE数据库恢复 oracle 比特币 OSD-04016 YOUR FILES ARE ENCRYPTED 勒索恢复 比特币加密文章分类
- Others (2)
- 中间件 (2)
- WebLogic (2)
- 操作系统 (110)
- 数据库 (1,829)
- DB2 (22)
- MySQL (80)
- Oracle (1,658)
- Data Guard (53)
- EXADATA (8)
- GoldenGate (24)
- ORA-xxxxx (168)
- ORACLE 12C (72)
- ORACLE 18C (6)
- ORACLE 19C (15)
- ORACLE 21C (3)
- Oracle 23ai (8)
- Oracle ASM (69)
- Oracle Bug (8)
- Oracle RAC (54)
- Oracle 安全 (6)
- Oracle 开发 (28)
- Oracle 监听 (29)
- Oracle备份恢复 (626)
- Oracle安装升级 (103)
- Oracle性能优化 (62)
- 专题索引 (5)
- 勒索恢复 (86)
- PostgreSQL (37)
- pdu工具 (7)
- PostgreSQL恢复 (13)
- SQL Server (34)
- SQL Server恢复 (14)
- TimesTen (7)
- 达梦数据库 (3)
- 达梦恢复 (1)
- 生活娱乐 (2)
- 至理名言 (11)
- 虚拟化 (2)
- VMware (2)
- 软件开发 (46)
- Asp.Net (9)
- JavaScript (12)
- PHP (2)
- 小工具 (29)
-
最近发表
- expdp导出xml列报ORA-22924故障处理
- obet处理ORA-704 ORA-604 ORA-1578故障
- obet修复csc higher than block scn类型坏块
- ORA-600 kcratr_nab_less_than_odr和ORA-600 4193故障处理
- aix环境10g由于控制器异常导致ORA-600 4000故障处理
- ORA-600 3716故障处理
- 不当恢复truncate数据导致数据库不能open处理
- 注意:PostgreSQL库出现readme_to_recover勒索
- Oracle 19c 202601补丁(RUs+OJVM)-19.30
- Patch_SCN快速解决ORA-600 2663故障
- 在生产环境错误执行dd命令破坏asm磁盘故障恢复
- obet实现对数据文件坏块检测功能
- oracle linux 8.10注意pmlogger导致空间被大量占用
- obet快速修改scn/resetlogs恢复数据库(缺少归档,ORA-00308)
- 使用DBMS_PDB.RECOVER抢救单个pdb
- aix环境写入大文件设置combehin提高效率
- 记录一次国产数据库被rm -rf /*删除的救援过程
- 数据库启动报 maximum number of processes () exceeded分析
- ORA-600 [ksunfy : too few sessions]
- 由于数据块scn大于数据库scn导致ORA-600 kcbzib_kcrsds_1错误
标签归档:bootstrap$损坏
恶意删除bootstrap$导致数据库无法正常启动
有客户10.2.0.5的数据库关闭之后,无法正常启动报ORA-00704 ORA-00702错误.使用自研的ORA-702_Recovery Tool小工具可以实现一键恢复,下载地址:ORA-702_Recovery下载
Fri May 18 22:42:26 2018 ALTER DATABASE OPEN Fri May 18 22:42:27 2018 Beginning crash recovery of 1 threads parallel recovery started with 7 processes Fri May 18 22:42:27 2018 Started redo scan Fri May 18 22:42:27 2018 Completed redo scan 1 redo blocks read, 0 data blocks need recovery Fri May 18 22:42:27 2018 Started redo application at Thread 1: logseq 2, block 2, scn 8448162573 Fri May 18 22:42:27 2018 Recovery of Online Redo Log: Thread 1 Group 2 Seq 2 Reading mem 0 Mem# 0: D:\DATABASE\xifenfei\REDO02.LOG Fri May 18 22:42:27 2018 Completed redo application Fri May 18 22:42:27 2018 Completed crash recovery at Thread 1: logseq 2, block 3, scn 8448182575 0 data blocks read, 0 data blocks written, 1 redo blocks read Fri May 18 22:42:28 2018 LGWR: STARTING ARCH PROCESSES ARC0 started with pid=23, OS id=3188 ARC1 started with pid=24, OS id=3168 ARC2 started with pid=25, OS id=996 ARC3 started with pid=26, OS id=432 ARC4 started with pid=27, OS id=3728 Fri May 18 22:42:28 2018 ARC0: Archival started ARC1: Archival started ARC5 started with pid=28, OS id=2876 Fri May 18 22:42:28 2018 ARC2: Archival started ARC3: Archival started ARC4: Archival started ARC5: Archival started LGWR: STARTING ARCH PROCESSES COMPLETE Fri May 18 22:42:28 2018 Thread 1 advanced to log sequence 3 (thread open) Thread 1 opened at log sequence 3 Current log# 3 seq# 3 mem# 0: D:\DATABASE\xifenfei\REDO03.LOG Successful open of redo thread 1 Fri May 18 22:42:28 2018 MTTR advisory is disabled because FAST_START_MTTR_TARGET is not set Fri May 18 22:42:28 2018 ARC0: Becoming the 'no FAL' ARCH ARC0: Becoming the 'no SRL' ARCH Fri May 18 22:42:28 2018 ARC2: Becoming the heartbeat ARCH Fri May 18 22:42:28 2018 SMON: enabling cache recovery Fri May 18 22:42:28 2018 Errors in file d:\oracle\product\10.2.0\admin\xifenfei\udump\xifenfei_ora_3148.trc: ORA-00704: 引导程序进程失败 ORA-00702: 引导程序版本 '' 与版本 '8.0.0.0.0' 不一致 Fri May 18 22:42:28 2018 Error 704 happened during db open, shutting down database USER: terminating instance due to error 704 Instance terminated by USER, pid = 3148 ORA-1092 signalled during: ALTER DATABASE OPEN...
根据以前恢复经验ORA-00702: bootstrap verison ” inconsistent with version ’8.0.0.0.0′,很可能是由于bootstrap$表异常了.
通过dbv检查system文件确认没有坏块

通过bbed分析,确认记录被删除
把数据文件拷贝到本地,通过bbed进行分析,确认记录丢失
BBED> map File: d:/system01.dbf (0) Block: 379 Dba:0x00000000 ------------------------------------------------------------ KTB Data Block (Table/Cluster) struct kcbh, 20 bytes @0 struct ktbbh, 48 bytes @20 struct kdbh, 14 bytes @68 struct kdbt[1], 4 bytes @82 sb2 kdbr[24] @86 ub1 freespace[1158] @134 ub1 rowdata[6896] @1292 ub4 tailchk @8188 BBED> p *kdbr[0] rowdata[6875] ------------- ub1 rowdata[6875] @8167 0x3c BBED> x /rnnc rowdata[6875] @8167 ------------- flag@8167: 0x3c (KDRHFL, KDRHFF, KDRHFD, KDRHFH) lock@8168: 0x01 cols@8169: 0
故障原因跟踪
有人在数据库中注入了恶意脚本,导致数据库删除了bootstrap$中数据,关闭之后无法正常启动

处理方法
通过oracle bbed 修复数据字典,正常启动数据库

加我微信(17813235971)
加我QQ(107644445)

