In current design of "VMware Snapshot Provider", the snapshot disks are hot-removed without prompt notification to the Windows OS, this will cause the device to be unexpectedly removed without notifying the guest OS, which causes the device to not be accessible (event 15).
When quiesced snapshot process begin, VMware snapshot provider hot-adds the writable snapshot disks (shadow copy volume disks); When quiesced snapshot process ends, VMware snapshot provider hot-removes the writable snapshot disks (shadow copy volume disks), then event15 is generated for "writable snapshot disk" because the writable snapshot disks are removed forcibly from Windows perspective.