VolSnap

Seen on:

• Windows 2003

• Windows XP 64-bit

Log type(s):	System
Log source(s):	VolSnap
Event message file(s):	%SystemRoot%\System32\Drivers\VolSnap.sys
	%SystemRoot%\System32\IoLogMsg.dll
	%SystemRoot%\System32\ws03res.dll

 

Seen on:

• Windows XP 32-bit

Log type(s):	System
Log source(s):	VolSnap
Event message file(s):	%SystemRoot%\System32\Drivers\VolSnap.sys
	%SystemRoot%\System32\IoLogMsg.dll