Oracle.exe ((NEW))

Oracle.exe process on Windows platform increases its memory usage if Windows bundle patch 11.2.0.4.9 and above is installed.Using an utility like handle.exe, oracle.exe process leaks Mutex (Mutant) handles and memory usage increases due to these handles.

oracle.exe

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the oracle.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Important: Some malware camouflages itself as oracle.exe. Therefore, you should check the oracle.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.

Summary: Average user rating of oracle.exe: based on 7 votes with 3 user comments.2 users think oracle.exe is essential for Windows or an installed application.One user thinks it's probably harmless.2 users think it's neither essential nor dangerous.2 users think oracle.exe is dangerous and recommend removing it.

To help you analyze the oracle.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. BMalwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

3) If we notice that oracle.exe is at 9GB memory usage in Windows Task Manager, does it mean it is the approximate HWM for Oracle database ? Or does it mean that it is currently using it at that very moment ?

N/ANon-system processes like oracle.exe originate from software you installed on your system. Since most applications store data on your hard disk and in your system's registry, it is likely that your computer has suffered fragmentation and accumulated invalid entries which can affect your PC's performance. In Windows Task Manager, you can see what CPU, memory, disk and network utilization is causing the oracle process. To access the Task Manager, hold down the Ctrl + Shift + Esc keys at the same time. These three buttons are located on the far left of your keyboard.

The oracle.exe process is also known as Oracle RDBMS Kernel Executable and is a part of Oracle Database (Version 10g Express Edition, 11g Express Edition). This software is produced by Oracle (www.oracle.com). An obsolete or defective version of oracle.exe can cause problems for your computer that can range from slowness to error messages such as these:

oracle.exe is not part of Windows, but it is important nonetheless. Oracle.exe is found in a subdirectory of "C:\Program Files".The file size is 13,179,660 bytes.It is the service "OracleServiceXE".This file does not supply any version information or other description. The oracle file is not part of the Windows operating system. The program executes in the background, and can only be terminated using Windows Task Manager. This oracle program can initiate a network connection--either to the Internet or on your LAN.Oracle.exe is capable of monitor other applications.For this reason, 53% of all experts consider this file to be a possible threat. The probability that it can cause harm is high.

If you see this file on your hard drive or in Windows Task Manager, please make sure that it is not a malicious variant. It's a fact that many trojans try to cloak their true identity by calling themselves oracle.exe. With the above information or by using tools like Security Task Manager you can determine if, in your case, the file is an undesirable variant.

If Windows not working quite right for you, or if startup is taking a long time, or oracle.exe is causing problems for you, a good Windows diagnostic tool may very well help. This is especially effective when it comes to older computers that have accumulated vast quantities of "garbage data" as the result of many software installs and uninstalls.

Run strace -p . The output is like1625 1868 2076 NtQueryInformationThread (260, 0, 49541372, 28, 0, ... ) == 0x0Here's the explanation of each element.162518682076NtQueryInformationThread(260, 0, 49541372, 28, 0, ... )==0x0strace sequence#Oracle pidthread ID inside oracle.exe process (or v$process.spid in Oracle)Windows system service call (undocumented)argument list return valueYou can filter on a specific service with -e switch like this: strace -e NtWriteFile -p 1868, or less efficiently by piping to grep: strace -p 1868 grep NtWriteFile. If you want to filter on a specific thread, pipe this way: strace -p 1868 grep " 1868 2076 ". (If you don't have grep, use find instead, which comes with modern Windows versions; remember find requires double quotes around its argument while grep requires them only if there're spaces in the search string.)

For NtQueryInformationThread, the first argument is handle to the object being queried. In our case, it's file handle. Launch ProcExp and look at the lower pane when you highlight oracle.exe in the upper pane. You see handle 0x104 (260 in decimal) is a thread object with thread ID 2076; 0x214 (532 decimal) is thread 2044. They are Oracle PMON and RECO background processes, respectively. You can also save ProcExp result to a file named procexp.txt (make sure you highlight oracle.exe in the upper pane). To replace the hex file handles with decimal handles for easy reading, assuming you installed Perl, run the command below and look at oracle.txt.

^C is shown in the middle. Here the oracle.exe process has PID 1996 and most of the calls are querying about performance and general thread information. If you want to limit the tracing to a specific thread or Oracle spid say 884:

Oracle parameter LOCK_SGA "locks the entire SGA into physical memory... is ignored on platforms that do not support it". Does Windows support it? Due to a problem described in Note:274092.1, it's fair to say LOCK_SGA was not correctly supported on Windows in the past. But this doesn't stop us from exploring the effect of setting this parameter on the oracle.exe process. My earlier test with 10g shows that this parameter increased oracle.exe process working set size on database startup and this test was later reproduced with 9i. In the test below, we'll use strace to see exactly what this parameter has done.

This is Oracle 9.2.0.1.0 on XP. If LOCK_SGA is set to true and PRE_PAGE_SGA is not set to true (see Heini Nolsoe's message for the latter requirement), running strace on oracle.exe while the database is starting up returns the following lines:c:\>strace -p 3120 grep -i lock[snipped]2588 3120 2260 NtLockVirtualMemory (-1, (0x3070000), 454656, 1, ... (0x3070000), 454656, ) == 0x02590 3120 2260 NtLockVirtualMemory (-1, (0x78400000), 92274688, 1, ... (0x78400000), 92274688, ) == 0x02592 3120 2260 NtLockVirtualMemory (-1, (0x30e0000), 667648, 1, ... (0x30e0000), 667648, ) == 0x0[snipped]This says that the Windows system service NtLockVirtualMemory, which implements the documented VirtualLock Win32 function, locks virtual memory starting at the above three hex addresses of size 454656, 92274688 and 667648 bytes, respectively. The LockType 1 indicates that it tries to lock in working set list, not physical memory (which would be 2). Return code is success.

Windows has own command to trace all running processes in the system. Using "tasklist" command Oracle DBA can able to trace all running processes in windows including oracle, sqlplus, exp, imp and others. Tasklist command is very closer to ps command. Using tasklist command Oracle DBA can able to access process ids, session ids, cpu time, and modules of running processes in Oracle on Windows. Here find output of tasklist command including oracle.exe process. In windows each process treats as thread. In windows we are unable to see separate background processes like SMON, PMON, CKPT, LGWR, DBWR without installing third party tools. But we can see result of Oracle.exe thread output as following.

So I found the OS PID of my server process (or actually OS Thread ID inside oracle.exe process as I was on Windows) and used oradebug short_stack to check where that process was stuck (the output is slightly formatted):

oracle.exe is an executable file that is part of the Oracle Database 11g Express Edition program developed by Oracle Corporation. The software is usually about 549.55 KB in size.The .exe extension of a file name displays an executable file. In some cases, executable files can damage your computer. Please read the following to decide for yourself whether the oracle.exe file on your computer is a virus or trojan horse that you should delete, or whether it is a valid Windows operating system file or a reliable application.Recommended: Identify oracle.exe related errors(optional offer for Reimage - Website EULA Privacy Policy Uninstall) Is oracle.exe safe, or is it a virus or malware?The first thing that will help you determine if a particular file is a legitimate Windows process or a virus, is the location of the executable itself. For example, a process like oracle.exe should run from C:\oraclexe\app\oracle\product\11.2.0\server\database\oradba.exe and not elsewhere.To confirm, open the Task Manager, go to View -> Select Columns and select "Image Path Name" to add a location column to your Task Manager. If you find a suspicious directory here, it may be a good idea to investigate this process further.Another tool that can sometimes help you detect bad processes is Microsoft's Process Explorer. Start the program (it does not require installation) and activate "Check Legends" under Options. Now go to View -> Select Columns and add "Verified Signer" as one of the columns.If the "Verified Signer" status of a process is listed as "Unable to Verify", you should take a moment look at the process. Not all good Windows processes have a Verified Signature label, but neither do any of the bad ones.The most important facts about oracle.exe:Located in C:\oraclexe\ subfolder;Publisher: Oracle CorporationFull Path: C:\oraclexe\app\oracle\product\11.2.0\server\database\oradba.exeHelp file: Publisher URL: www.oracle.comKnown to be up to 549.55 KB in size on most Windows;If you had any difficulties with this executable, you should determine if it's trustworthy before deleting oracle.exe. To do this, find this process in Task Manager.Find its location (it should be in C:\oraclexe\) and compare the size etc with the above facts.If you suspect that you may be infected with a virus, then you must attempt to fix it immediately. To delete the oracle.exe virus, you should download and install a full security application like Malwarebytes. Note that not all tools can detect every type of malware, so you may need to try several options before you're successful. 041b061a72