Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Register

Quick Links


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop

Categories

In this Discussion

Home › General
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

MySQL doesn't exist in engine (Aftermath of JungleSec Ransomware)

ShakibShakib Member, Patron Provider
edited November 2024 in General

We have managed to get all important data from a VPS that was encrypted. The problem is that we are unable to make the MySQL databases to work due to an error MySQL doesn't exist in engine.

mysqldump: Couldn't execute 'show create table attendance_info': Table 'attendance.attendance_info' doesn't exist in engine (1932)

Any database experts here? My client is willing to pay a small fee for the solution.

Comments

  • egororegoror Member

    Have you already tried basic steps, like
    https://www.devopssupport.in/blog/fixing-mysql-error-1932-table-doesnt-exist-in-engine/
    and asking chatgpt.

    Thanked by 1Shakib
  • DeadlyChemistDeadlyChemist Member

    USE attendance;
    SHOW TABLES;

    Sounds like corrupted data

    You need to chexk whether the data is there, not corrupted
    CHECK TABLE attendance_info;

    Go into files, wherever the mysl is and chexk for the table. Maybe send the tree output

    Thanked by 1Shakib
  • ShakibShakib Member, Patron Provider

    @egoror said:
    Have you already tried basic steps, like
    https://www.devopssupport.in/blog/fixing-mysql-error-1932-table-doesnt-exist-in-engine/
    and asking chatgpt.

    Already tried everything possible, whatever was found online.

    @DeadlyChemist said:
    USE attendance;
    SHOW TABLES;

    Sounds like corrupted data

    You need to chexk whether the data is there, not corrupted
    CHECK TABLE attendance_info;

    Go into files, wherever the mysl is and chexk for the table. Maybe send the tree output

    MariaDB [(none)]> USE attendance;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Database changed
MariaDB [attendance]> SHOW TABLES;
+----------------------+
| Tables_in_attendance |
+----------------------+
| attendance_info      |
| attendance_log       |
| attendance_types     |
| devices              |
| out_types            |
| shift_data           |
| users                |
+----------------------+
7 rows in set (0.000 sec)

MariaDB [attendance]>

    So all the data is there. Just we can't use it or get dump backup due to the doesn't exist in engine (1932) error.

  • djuniordjunior Member, Patron Provider
    edited November 2024

    Hi,

    Have you tried the following:

    • Export only that table, that sometimes skips the lock and gets you a dump:
      mysqldump -u username -p --single-transaction --skip-lock-tables attendance attendance_info > dump.sql

    • Try a repair: REPAIR TABLE attendance_info;

    • Copy the ib_logfile* and ibdata1 files from the old MySQL data folder to the new MySQL data folder, this can resolve the issue.

    Hopefully this can help!

    Thanked by 3Andreix Frameworks Shakib
  • JabJabJabJab Member

    Full logs of mysqld?

    aka I assume it's InnoDB database - did you restore all the files needed? There are some crazy files like ibdata1 and ib_logfile that are above of "per database" directory that are also needed for InnoDB engine to work.

    Thanked by 2Shakib yoursunny
  • egororegoror Member

    SHOW TABLE STATUS WHERE Name = 'attendance_info';

    Thanked by 1Shakib
  • DeadlyChemistDeadlyChemist Member

    @Shakib said:

    @egoror said:
    Have you already tried basic steps, like
    https://www.devopssupport.in/blog/fixing-mysql-error-1932-table-doesnt-exist-in-engine/
    and asking chatgpt.

    Already tried everything possible, whatever was found online.

    @DeadlyChemist said:
    USE attendance;
    SHOW TABLES;

    Sounds like corrupted data

    You need to chexk whether the data is there, not corrupted
    CHECK TABLE attendance_info;

    Go into files, wherever the mysl is and chexk for the table. Maybe send the tree output

    MariaDB [(none)]> USE attendance;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Database changed
MariaDB [attendance]> SHOW TABLES;
+----------------------+
| Tables_in_attendance |
+----------------------+
| attendance_info      |
| attendance_log       |
| attendance_types     |
| devices              |
| out_types            |
| shift_data           |
| users                |
+----------------------+
7 rows in set (0.000 sec)

MariaDB [attendance]>

    So all the data is there. Just we can't use it or get dump backup due to the doesn't exist in engine (1932) error.

    Pls run
    CHECK TABLE attendance_info;
    Ypu can try:
    ALTER TABLE attendance_info FORCE;

    Thanked by 1Shakib
  • ShakibShakib Member, Patron Provider

    @JabJab said:
    Full logs of mysqld?

    aka I assume it's InnoDB database - did you restore all the files needed? There are some crazy files like ibdata1 and ib_logfile that are above of "per database" directory that are also needed for InnoDB engine to work.

    It is InnoDB. I didn't touch it yet. Waiting for Rack911 to check out everything as it is.

    We do have ibdata1 and ib_logfile.

  • DeadlyChemistDeadlyChemist Member

    @Shakib said:

    @JabJab said:
    Full logs of mysqld?

    aka I assume it's InnoDB database - did you restore all the files needed? There are some crazy files like ibdata1 and ib_logfile that are above of "per database" directory that are also needed for InnoDB engine to work.

    It is InnoDB. I didn't touch it yet. Waiting for Rack911 to check out everything as it is.

    We do have ibdata1 and ib_logfile.

    Then you can try the force thing, chexk my comment

    Thanked by 1Shakib
  • ailiceailice Member

    Pretty sure it was logged on status on InnoDB, you can tried execute query :

    SHOW ENGINE INNODB STATUS

    And see what lastest error occured.

    Thanked by 1Shakib
  • DeadlyChemistDeadlyChemist Member

    Update?

    Thanked by 1Shakib
  • ShakibShakib Member, Patron Provider

    @DeadlyChemist said:
    Update?

    Rack911 is trying to fix it now.

    I will try myself again once they are done trying.

  • itsdeadjimitsdeadjim Member

    Probably messing with the files while mysql was running corrupted the file structure.

    If everything fails and it's important data, send me a pm, I can help with trying some low level reading of the data, I have some experience on similar situations.

    Thanked by 1Shakib
  • LeviLevi Member

    @Shakib said:

    @DeadlyChemist said:
    Update?

    Rack911 is trying to fix it now.

    I will try myself again once they are done trying.

    How much does r911 charge these days?

    Thanked by 1Shakib
  • DeadlyChemistDeadlyChemist Member

    @Levi said:

    @Shakib said:

    @DeadlyChemist said:
    Update?

    Rack911 is trying to fix it now.

    I will try myself again once they are done trying.

    How much does r911 charge these days?

    probably leg and an arm

    Thanked by 1Shakib
  • ShakibShakib Member, Patron Provider

    @Levi said:

    @Shakib said:

    @DeadlyChemist said:
    Update?

    Rack911 is trying to fix it now.

    I will try myself again once they are done trying.

    How much does r911 charge these days?

    $150 per hour with 30 minutes increments.

  • DeadlyChemistDeadlyChemist Member

    @Shakib said:

    @Levi said:

    @Shakib said:

    @DeadlyChemist said:
    Update?

    Rack911 is trying to fix it now.

    I will try myself again once they are done trying.

    How much does r911 charge these days?

    $150 per hour with 30 minutes increments.

    yikes, im cheaper :) but definetly not as good

    Thanked by 1Shakib
  • filteredfiltered Member
    edited November 2024

    @Shakib said:

    @Levi said:

    @Shakib said:

    @DeadlyChemist said:
    Update?

    Rack911 is trying to fix it now.

    I will try myself again once they are done trying.

    How much does r911 charge these days?

    $150 per hour with 30 minutes increments.

    Which Rack911 is this? Rack911.com or Rack911Labs.ca? Or are they the same company just one is server management and one is pentesting/vulnerability?

  • ShakibShakib Member, Patron Provider

    @MeltedMembrane said:

    @Shakib said:

    @Levi said:

    @Shakib said:

    @DeadlyChemist said:
    Update?

    Rack911 is trying to fix it now.

    I will try myself again once they are done trying.

    How much does r911 charge these days?

    $150 per hour with 30 minutes increments.

    Which Rack911 is this? Rack911.com or Rack911Labs.ca? Or are they the same company just one is server management and one is pentesting/vulnerability?

    They are related. They works together and so on but different as far as I know.

    I am with .com

    Thanked by 1filtered
  • plumbergplumberg Veteran, Megathread Squad

    Any other providers that help with emergency service like rack911?

    Thanked by 1Shakib
  • aj_potcaj_potc Member

    Did this get resolved? You got a number of really good suggestions here.

    Thanked by 2DeadlyChemist Shakib
  • ShakibShakib Member, Patron Provider

    @aj_potc said:
    Did this get resolved? You got a number of really good suggestions here.

    Around 50% of the database can be recovered. My client said it will not work for him and we might get sued if we are unable to recover most of the database.

    So we will be trying to decrypt the VPS again with help from the attacker and see if we can do better.

  • risharderisharde Host Rep, Veteran

    @Shakib said:

    @aj_potc said:
    Did this get resolved? You got a number of really good suggestions here.

    Around 50% of the database can be recovered. My client said it will not work for him and we might get sued if we are unable to recover most of the database.

    So we will be trying to decrypt the VPS again with help from the attacker and see if we can do better.

    Why would the client want to sue you? Did you somehow guarantee some sort of working backup or something? Sorry to derail the thread

    Thanked by 1Shakib
  • ShakibShakib Member, Patron Provider
    edited November 2024

    @risharde said:

    @Shakib said:

    @aj_potc said:
    Did this get resolved? You got a number of really good suggestions here.

    Around 50% of the database can be recovered. My client said it will not work for him and we might get sued if we are unable to recover most of the database.

    So we will be trying to decrypt the VPS again with help from the attacker and see if we can do better.

    Why would the client want to sue you? Did you somehow guarantee some sort of working backup or something? Sorry to derail the thread

    Nope. Not in our terms. Those were the chosen parameters when the service was ordered.

    Support: Unmanaged ($0.00)

    Automated Backups: No thanks, I will keep my own backups ($0.00)

    The plan itself comes with premium support so I just had to try my best. My client is currently running with a backup from 2 Sep 2024 for now. I have tried my best with Rack911 and the attacker to get those data fully recovered. We have managed to recover around 80% of the complete data so far after spending days and night on it. That includes 100% of the websites/files and at least 50% of the databases.

  • aj_potcaj_potc Member

    @Shakib said:

    Nope. Not in our terms. Those were the chosen parameters when the service was ordered.

    Support: Unmanaged ($0.00)

    Automated Backups: No thanks, I will keep my own backups ($0.00)

    The plan itself comes with premium support so I just had to try my best. My client is currently running with a backup from 2 Sep 2024 for now. I have tried my best with Rack911 and the attacker to get those data fully recovered. We have managed to recover around 80% of the complete data so far after spending days and night on it. That includes 100% of the websites/files and at least 50% of the databases.

    It sounds to me like you went way above and beyond for the client, and that you have a pretty solid defense against any legal action (which is likely just an empty threat anyway).

    Thanked by 1Shakib
  • ShakibShakib Member, Patron Provider
    edited November 2024

    @aj_potc said:

    @Shakib said:

    Nope. Not in our terms. Those were the chosen parameters when the service was ordered.

    Support: Unmanaged ($0.00)

    Automated Backups: No thanks, I will keep my own backups ($0.00)

    The plan itself comes with premium support so I just had to try my best. My client is currently running with a backup from 2 Sep 2024 for now. I have tried my best with Rack911 and the attacker to get those data fully recovered. We have managed to recover around 80% of the complete data so far after spending days and night on it. That includes 100% of the websites/files and at least 50% of the databases.

    It sounds to me like you went way above and beyond for the client, and that you have a pretty solid defense against any legal action (which is likely just an empty threat anyway).

    It's a good thing that we are debt-free and operate at very low monthly cost.

    We can afford a decent lawyer and will definitely fight in case he does actually sue us. We won't be going for any settlements.

    On a side note, never open a wrongful payment dispute on us. We usually fight those. Just ask for a refund first.

  • suyadi92suyadi92 Member

    Maybe try to recover from binary log?
    https://dev.mysql.com/doc/refman/8.4/en/point-in-time-recovery-binlog.html

    Thanked by 1Shakib
Sign In or Register to comment.