| Event Id | 38 |
| Source | VolSnap |
| Description | Volume Snapshot Driver - Diff Area health issues |
| Event Information | "According to Microsoft : CAUSE: To maintain the consistency of shadow copies, the Volume Shadow Copy Service saves the original data to a shadow copy storage area (also referred to as a Diff Area). This event indicates that Volume Shadow Copy Service encountered an issue when writing to this area. Possible causes include: 1.A disk I/O error occurred while performing the copy-on-write operation. 2.There is a bad block on the disk that contains the volume where the Diff Area is stored. 3.The Diff Area is not large enough to store the shadow copies. 4.The disk I/O or system load is so large that the Diff Area was not able increase in size fast enough. RESOLUTION: Do one or more of the following: 1.Using chkdsk /r, check for errors on the volume where the Diff Area is stored and on the original volume,. 2.Check the system log in Event Viewer for errors associated with the volume where the Diff Area is stored or with the original volume. 3.Check for hardware errors on the disks that contain the volume where the Diff Area is stored and on the original volume. 4.Move the Diff Area to a different, dedicated volume. 5.Move the Diff Area to a larger volume. 6.Allocate more storage space for the Diff Area. 7.Increase the Diff Area initial size and growth rate by changing the MinDiffArea registry key. Caution: Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer" |
| Reference Links | Event ID:38 Of Source ID:VolSnap |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.