Message

Explanation and/or corrective action

Level

 

 

 

 

In addition to preventing the locked application from exiting, AppLock must also prevent

 

In app hook:WM_SIZE

the application from enabling the taskbar and resizing the application’s window. This

LOG_EX

 

message traps a change in the window size and corrects it.

 

 

 

 

In app hook:WM_

In addition to preventing the locked application from exiting, AppLock must also prevent

 

the application from enabling the taskbar and resizing the application’s window. This

LOG_EX

WINDOWPOSCHANGED

message traps a change in the window position and corrects it.

 

 

 

 

Initializing keyboard

AppLock is calling the keyboard hook initialization.

LOG_

hook procedure

PROCESSING

 

 

 

 

Keyboard hook

The keyboard filter initialization failed.

LOG_ERROR

initialization failure

 

 

 

 

 

Keyboard hook loaded

The keyboard hook dll exists and loaded successfully.

LOG_EX

OK

 

 

 

 

 

L after Ctrl

Processing the backdoor entry.

LOG_EX

 

 

 

Loading keyboard hook

When AppLock first loads, it loads a dll that contains the keyboard hook processing. This

LOG_

message is logged prior to the load attempt.

PROCESSING

 

 

 

 

Open failure

The status information is being saved to a file and the file open has failed. This could

LOG_ERROR

occur if the file is write protected. If the file does not exist, it is created.

 

 

 

 

 

Open registry failure

If the Administration registry key does not exist, the switch to user mode fails because the

LOG_ERROR

AppName value in the Administration key is not available.

 

 

 

 

 

Opened status file

The status information is being saved to a file and the file has been opened successfully.

LOG_EX

 

 

 

Out of memory for

Not enough memory to encrypt the password.

LOG_ERROR

encrypted pwd

 

 

 

 

 

pRealTaskbarWndProc

The taskbar control has already been installed.

LOG_EX

already set

 

 

 

 

 

Pwd cancelled or invalid-

The password prompt was cancelled by the user or the maximum number of failed

LOG_EX

remain in user mode

attempts to enter a password was exceeded.

 

 

 

 

Read registry error-hot

The hotkey registry entry is missing or empty. This is not considered an error. The

LOG_ERROR

key

keyboard hook uses an embedded default if the value is not set in the registry.

 

 

 

 

Read registry failure-app

AppName registry value does not exist or is empty. This constitutes a failure for switching

LOG_ERROR

name

into user mode.

 

 

 

 

Read registry failure-

AppCommandLine registry entry is missing or empty. This is not considered an error

LOG_ERROR

Cmd Line

since command line information is not necessary to launch and lock the application.

 

 

 

 

Read registry failure-

The Internet registry entry is missing or empty. This is not considered an error since the

LOG_ERROR

Internet

Internet value is not necessary to launch and lock the application.

 

 

 

 

Registering Backdoor

The AppLock system communicates with the keyboard hook via a user defined message.

LOG_

MSG

Both AppLock.exe and Kbdhook.dll register the message at initialization.

PROCESSING

 

 

 

Registering Hotkey MSG

The AppLock system communicates with the keyboard hook via a user defined message.

LOG_

Both Applock.exe and Kbdhook.dll register the message at initialization.

PROCESSING

 

 

 

 

 

The registry has to be read when entering user mode is the AppName is missing. This

 

Registry read failure at

user mode entry is attempted at boot and after a hotkey switch when the administrator has

LOG_ERROR

reenter user mode

closed the application being locked or has changed the application name or command

 

 

line.

 

 

 

 

 

The registry has to be read when switching into user mode. This is because the

 

Registry read failure at

administrator can change the settings during administration mode. The read of the

LOG_ERROR

reenter user mode

registry failed which means the Administration key was not found or the AppName value

 

 

was missing or empty.

 

 

 

 

4-59