itman

A2service.exe Not Terminating Properly At System Shutdown

Recommended Posts

I happened to be reviewing my reliability history in Win 7 and noticed that a2service.exe is not terminating properly at system shutdown time. This started on July 8 and has continued since that time. Also explains the delay I have been noticing at shutdown time. Also appears that this might be affecting other things since I had issues this morning at boot time with some apps working properly; IE11 and Win disk cleanup would not startup. A subsequent reboot corrected those issues.

 

Note that the a2service.exe issue only occurs at system shutdown but not at system restart?

 

Source

Emsisoft Protection Service

 

Summary

Stopped working

 

Date

7/16/2016 7:32 PM

 

Status

Report sent

 

Description

 

Faulting Application Path: C:\Program Files\Emsisoft Anti-Malware\a2service.exe

 

Problem signature

 

Problem Event Name: APPCRASH

Application Name: a2service.exe

Application Version: 11.9.0.6513

Application Timestamp: 5772c632

Fault Module Name: StackHash_e951

Fault Module Version: 6.1.7601.23455

Fault Module Timestamp: 573a54b7

Exception Code: c0000374

Exception Offset: 00000000000bf262

OS Version: 6.1.7601.2.1.0.768.3

Locale ID: 1033

Additional Information 1: e951

Additional Information 2: e951a76a4c11b99caffbb03f3a1e3d40

Additional Information 3: 158d

Additional Information 4: 158deb71759178f3e01090a46f6c6b30

 

Extra information about the problem

 

Bucket ID: 244829027

 

-EDIT-

 

Here some additional info from the event log. Also this error appears to occur sometimes but not always at system restart time:

 

Log Name:      Application
Source:        Application Error
Date:          7/16/2016 7:32:53 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      xxxx
Description:
Faulting application name: a2service.exe, version: 11.9.0.6513, time stamp: 0x5772c632
Faulting module name: ntdll.dll, version: 6.1.7601.23455, time stamp: 0x573a54b7
Exception code: 0xc0000374
Fault offset: 0x00000000000bf262
Faulting process id: 0x4a8
Faulting application start time: 0x01d1df5e17833f6b
Faulting application path: C:\Program Files\Emsisoft Anti-Malware\a2service.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 9dc12495-4bad-11e6-976e-1c6f652f1513
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2016-07-16T23:32:53.000000000Z" />
    <EventRecordID>126859</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Don-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>a2service.exe</Data>
    <Data>11.9.0.6513</Data>
    <Data>5772c632</Data>
    <Data>ntdll.dll</Data>
    <Data>6.1.7601.23455</Data>
    <Data>573a54b7</Data>
    <Data>c0000374</Data>
    <Data>00000000000bf262</Data>
    <Data>4a8</Data>
    <Data>01d1df5e17833f6b</Data>
    <Data>C:\Program Files\Emsisoft Anti-Malware\a2service.exe</Data>
    <Data>C:\Windows\SYSTEM32\ntdll.dll</Data>
    <Data>9dc12495-4bad-11e6-976e-1c6f652f1513</Data>
  </EventData>
</Event>

Share this post


Link to post
Share on other sites

Confirmed at my end.

Source
Emsisoft Protection Service

Summary
Stopped working

Date
‎17.‎7.‎2016. 13:50

Status
No solution available

Description
Faulting Application Path:	C:\Program Files\Emsisoft Anti-Malware\a2service.exe

Problem signature
Problem Event Name:	APPCRASH
Application Name:	a2service.exe
Application Version:	11.9.0.6513
Application Timestamp:	5772c632
Fault Module Name:	StackHash_e951
Fault Module Version:	6.1.7601.23455
Fault Module Timestamp:	573a54b7
Exception Code:	c0000374
Exception Offset:	00000000000bf262
OS Version:	6.1.7601.2.1.0.256.48
Locale ID:	1050
Additional Information 1:	e951
Additional Information 2:	e951a76a4c11b99caffbb03f3a1e3d40
Additional Information 3:	158d
Additional Information 4:	158deb71759178f3e01090a46f6c6b30

Files that help describe the problem
AppCompat.txt
WERInternalMetadata.xml
WERDataCollectionFailure.txt


Share this post


Link to post
Share on other sites

I am attaching the dump files minus the full dump file since it is to large from the reliability monitor analysis.

 

There is also something very odd. Yesterday when I examined .dll usage by a2service.exe, I noticed an unsigned OpenSLL .dll loaded. Below is extracted from one of the reliability monitor dump files. Today, I do not see that .dll loaded by a2service.exe. Why is a OpenSLL file that appears to date to 2005 and unsigned being loaded into a2service.exe?

MATCHING_FILE NAME="ssleay32.dll" SIZE="411648" CHECKSUM="0xFEF6E8D6" BIN_FILE_VERSION="1.0.2.4" BIN_PRODUCT_VERSION="1.0.2.4" PRODUCT_VERSION="1.0.2d" FILE_DESCRIPTION="OpenSSL Shared Library" COMPANY_NAME="The OpenSSL Project, http://www.openssl.org/"PRODUCT_NAME="The OpenSSL Toolkit" FILE_VERSION="1.0.2d" ORIGINAL_FILENAME="ssleay32.dll" INTERNAL_NAME="ssleay32" LEGAL_COPYRIGHT="Copyright © 1998-2005 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved." VERDATEHI="0x0" VERDATELO="0x0" VERFILEOS="0x4" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x6CD31" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="1.0.2.4" UPTO_BIN_PRODUCT_VERSION="1.0.2.4" LINK_DATE="07/10/2015 09:07:54" UPTO_LINK_DATE="07/10/2015 09:07:54" EXPORT_NAME="SSLEAY32.dll" VER_LANGUAGE="English (United States) [0x409]" EXE_WRAPPER="0x0"

 

WERFCC5.tmp.zip

 

-EDIT- Will also add that there is a specific ver. of ssleay32.dll written for AMD64 processor which is what I use.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.