首页 > 其他分享 >DBV-00107: Unknown header format 故障处理---惜分飞

DBV-00107: Unknown header format 故障处理---惜分飞

时间:2023-11-27 22:33:20浏览次数:37  
标签:format Unknown 分飞 header value file oracle block ORA

联系:手机/微信(+86 17813235971) QQ(107644445)QQ咨询惜分飞

标题:DBV-00107: Unknown header format 故障处理

作者:惜分飞©版权所有[未经本人同意,不得以任何形式转载,否则有进一步追究法律责任的权利.]

客户linux平台被勒索病毒加密,其中有oracle数据库.客户联系黑客进行解密【勒索解密oracle失败】,但是数据库无法正常启动,dbv检查数据库文件报错

[oracle@hisdb ~]$ dbv file=system01.dbf   DBVERIFY: Release 11.2.0.1.0 - Production on 星期一 11月 27 21:49:17 2023   Copyright (c) 1982, 2009, Oracle and/or its affiliates.  All rights reserved.     DBV-00107: 未知标头格式 (31) (287942924)

对应的英文为:DBV-00107: Unknown header format (31) (287942924),检查数据文件信息发现提示为 FILE NOT FOUND,使用脚本为:Oracle数据库异常恢复检查脚本(Oracle Database Recovery Check)检测结果
20231127220917


通过分区确认是文件头损坏
20231127220354

修复正确的文件头
20231127220457

再次dbv检查数据文件

 

[oracle@hisdb ~]$ dbv file=system01.dbf   DBVERIFY: Release 11.2.0.1.0 - Production on 星期一 11月 27 22:05:41 2023   Copyright (c) 1982, 2009, Oracle and/or its affiliates.  All rights reserved.   DBVERIFY - 开始验证: FILE = /u01/app/oracle/oradata/system01.dbf 页 12800 标记为损坏 Corrupt block relative dba: 0x00403200 (file 1, block 12800) Bad header found during dbv: Data in bad block:  type: 88 format: 1 rdba: 0x33877808  last change scn: 0x257a.7b3a44e3 seq: 0xe8 flg: 0xe6  spare1: 0x4e spare2: 0x73 spare3: 0x0  consistency value in tail: 0x65251001  check value in block header: 0xc3b4  computed block checksum: 0x4ca7       DBVERIFY - 验证完成   检查的页总数: 13440 处理的页总数 (数据): 3297 失败的页总数 (数据): 0 处理的页总数 (索引): 2097 失败的页总数 (索引): 0 处理的页总数 (其他): 1441 处理的总页数 (段)  : 1 失败的总页数 (段)  : 0 空的页总数: 6604 标记为损坏的总页数: 1 流入的页总数: 0 加密的总页数        : 0 最高块 SCN            : 1667927064 (12.1667927064)

修复其他文件头,并dbv检查,发现均在12800位置损坏.尝试recover database恢复数据库,报ORA-00742 ORA-00312之类错误.

Sat Nov 25 17:03:39 2023 ALTER DATABASE RECOVER  database  Media Recovery Start  started logmerger process Parallel Media Recovery started with 40 slaves Sat Nov 25 17:03:40 2023 Recovery of Online Redo Log: Thread 1 Group 7 Seq 27220 Reading mem 0   Mem# 0: /u01/app/oracle/oradata/redo07.log Sat Nov 25 17:03:41 2023 Hex dump of (file 3, block 7) in trace file /u01/app/oracle/diag/rdbms/his/his/trace/his_pr0l_52669.trc Corrupt block relative dba: 0x00c00007 (file 3, block 7) Bad header found during media recovery Data in bad block:  type: 124 format: 7 rdba: 0x1698b845  last change scn: 0x4fa1.3eaa638f seq: 0x6 flg: 0x24  spare1: 0x26 spare2: 0x42 spare3: 0x0  consistency value in tail: 0xa39e1e01  check value in block header: 0x2ca4  computed block checksum: 0x3b25 Reading datafile '/u01/app/oracle/oradata/undotbs01.dbf' for corruption at rdba: 0x00c00007 (file 3, block 7) Reread (file 3, block 7) found same corrupt data (no logical check) Sat Nov 25 17:03:41 2023 Hex dump of (file 46, block 3) in trace file /u01/app/oracle/diag/rdbms/his/his/trace/his_pr0w_52691.trc Corrupt block relative dba: 0x0b800003 (file 46, block 3) Bad header found during media recovery Data in bad block:  type: 7 format: 7 rdba: 0x77922022  last change scn: 0xdff3.c40df5b6 seq: 0x6f flg: 0xe5  spare1: 0xcd spare2: 0x6d spare3: 0x83d7  consistency value in tail: 0x63c63d2c  check value in block header: 0xf662  computed block checksum: 0xec49 Data in bad block:  type: 135 format: 4 rdba: 0x45ad2864  last change scn: 0x9d7e.34949c73 seq: 0x32 flg: 0x3e  spare1: 0x89 spare2: 0x0 spare3: 0x9f9f  consistency value in tail: 0xa5807800  check value in block header: 0xb2c9  computed block checksum: 0x3aea Reread (file 5, block 11259) found same corrupt data (no logical check)  type: 214 format: 1 rdba: 0x0228dbe9 Bad header found during media recovery  last change scn: 0xed57.ca4f7559 seq: 0x9b flg: 0x4a Data in bad block:  spare1: 0x97 spare2: 0x77 spare3: 0x2bab  type: 33 format: 6 rdba: 0x018d584a  consistency value in tail: 0x359f90d6  last change scn: 0xaeb8.2fa361eb seq: 0x60 flg: 0x92  check value in block header: 0x6b26  spare1: 0xea spare2: 0xe spare3: 0xb405 block checksum disabled Reread (file 3, block 4) found same corrupt data (no logical check) Corrupt block relative dba: 0x0b800e61 (file 46, block 3681) Bad header found during media recovery Data in bad block:  type: 131 format: 6 rdba: 0xc7edd0fc  last change scn: 0xd319.d0e54941 seq: 0x6f flg: 0x6d  spare1: 0xe7 spare2: 0x82 spare3: 0x439f  consistency value in tail: 0x18dc47b6  check value in block header: 0xe9c8  computed block checksum: 0x204d Reread (file 46, block 3681) found same corrupt data (no logical check) Hex dump of (file 1, block 2017) in trace file /u01/app/oracle/diag/rdbms/his/his/trace/his_pr10_52699.trc Corrupt block relative dba: 0x004007e1 (file 1, block 2017) Bad header found during media recovery Data in bad block:  type: 159 format: 2 rdba: 0x52c5b2b0  last change scn: 0x2ed8.e0bc5af9 seq: 0x62 flg: 0xe9  spare1: 0x81 spare2: 0x1e spare3: 0xda98  consistency value in tail: 0xc5753dd3  check value in block header: 0x2bba  block checksum disabled Reading datafile '/u01/app/oracle/oradata/system01.dbf' for corruption at rdba: 0x004007e1 (file 1, block 2017) Reread (file 1, block 2017) found same corrupt data (no logical check) Media Recovery failed with error 742 Errors in file /u01/app/oracle/diag/rdbms/his/his/trace/his_pr00_52622.trc: ORA-00283: recovery session canceled due to errors ORA-00742: Log read detects lost write in thread %d sequence %d block %d ORA-00312: online log 7 thread 1: '/u01/app/oracle/oradata/redo07.log' ORA-10877 signalled during: ALTER DATABASE RECOVER  database  ...

尝试强制打开数据库报ORA-600 krsi_al_hdr_update.15,参考:Oracle断电故障处理中有类似报错

SQL> alter database open resetlogs; alter database open resetlogs * ERROR at line 1: ORA-00600: internal error code, arguments: [krsi_al_hdr_update.15], [4294967295], [], [], [], [], [], [], [], [], [], []

由于redo问题无法resetlogs成功,解决异常redo,再次尝试open库,由于undo坏块无法open成功

SQL> alter database open resetlogs; alter database open resetlogs * ERROR at line 1: ORA-01092: ORACLE instance terminated. Disconnection forced ORA-01578: ORACLE data block corrupted (file # 3, block # 1848) ORA-01110: data file 3: '/u01/app/oracle/oradata/undotbs01.dbf' Process ID: 55655 Session ID: 2623 Serial number: 5

解决undo异常,数据库open成功.导出客户需要数据,完成此次恢复工作

标签:format,Unknown,分飞,header,value,file,oracle,block,ORA
From: https://www.cnblogs.com/xifenfei/p/17860706.html

相关文章

  • 字符串格式化站位 ——format
    s='helloworld'print('{0:*<20}'.format(s))#0是format的索引并且format的元素只有一个,输出字符串左对齐,右边补充以20为单位的*#结果为:helloworld**********print('{0:*>20}'.format(s))#结果为:**********helloworldprint('{0:*^20}'.format(s))#输出结果为:****......
  • 【Python】Formatter预定义的字段有哪些
    字段描述namelogger名字levelno日志级别数字levelname日志级别字符串pathname打印日志文件路径filename打印日志文件名module模块名lineno日志调用行数funcName日志调用所在函数名created消息创建时的时间对象(time.time())asctime消......
  • Information Graph 题解
    题目链接InformationGraph分析在线并不好做,考虑离线,先将树建出来\(2\)操作时\(x\)节点与当前根节点之间的点都会获得文件当前根节点可以用并查集维护对于查询的节点判断它是否为链上的点即可具体的,若该节点为\(rt\)子树中的点且该节点的子树包含\(x\)节点,它就......
  • String.format()方法占位符
    格式化字符串由4部分组成,特殊的格式常以%index$开头,index从1开始取值,表示将第index个参数拿进来进行格式化,[最小宽度]的含义也很好理解,就是最终该整数转化的字符串最少包含多少位数字。剩下2个部分的含义:标识如下:-在最小宽度内左对齐,不可以与"用0填充"同时使用#只适用于8进制和16进......
  • [Codeforces] CF1506C Epic Transformation
    EpicTransformation-洛谷算是今天的题目里边思维难度最高的一道了,但是代码真的简单的要死题意你有一个长度为 \(n\) 的序列 \(a\),你可以对其进行下列操作:选择 \(i,j\) 满足 \(*a_i\neqa_j*\) 然后删除 \(*a_i,a_j*\) 两个数。求序列 a 经过若干次操作后最少......
  • CF1506C Epic Transformation
    CF1506CEpicTransformationEpicTransformation-洛谷算是今天的题目里边思维难度最高的一道了,但是代码真的简单的要死题意你有一个长度为 \(n\) 的序列 \(a\),你可以对其进行下列操作:选择 \(i,j\) 满足 \(a_i\neqa_j\) 然后删除 \(*a_i,a_j*\) 两个数。求序......
  • A____Z____RECOVER____DATA勒索恢复---惜分飞
    有客户MySQL数据库被黑,业务库中表被删除,并创建A____Z____RECOVER____DATA库,里面有一张readme表,内容为:mysql>select*fromreadme\G;***************************1.row***************************zh_content:请尽快与我们取得联系,否则我们将会公布你的数据......
  • C# 22H2之后的windows版本使用SetDynamicTimeZoneInformation设置时区失败处理
    使用SetDynamicTimeZoneInformation设置时区返回false,设置失败。使用PowerShell设置Set-TimeZone成功。///<summary>///设置本地时区///参数取值"ChinaStandardTime",即可设置为中国时区///</summary>///<paramname="timeZoneId"></param>///<retur......
  • mysql数据库ERROR 1193 (HY000): Unknown system variable 'validate_password_policy
    一、概况  平时我们安装完数据库,需要进行对应的密码或者密码策略修改,此时需要mysql的密码验证插件。MySQL可能没有这个插件,就需要进行相应的处理。二、问题描述mysql>setglobalvalidate_password_policy=0;ERROR1193(HY000):Unknownsystemvariable'validate_passw......
  • information
    表字段information_schema.schemataschema_nameinformation_schema.tablestables_nameinformation_schema.columnscolumn_nameInformation_schema(数据库)(MySQL中默认的数据库)SCHEMATA(表):存储了MySQL下每一个数据库的相关信息......