Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.0.6000.16386 (vista_rtm.061101-2205) 13.17%
6.0.6000.16386 (vista_rtm.061101-2205) 4.53%
6.0.6000.16386 (vista_rtm.061101-2205) 2.06%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.41%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.41%
5.1.2600.5577 (xpsp_sp3_qfe.080408-1616) 0.82%
5.1.2600.5512 (xpsp.080413-2105) 54.73%
5.1.2600.5512 (xpsp.080413-2105) 1.23%
5.1.2600.5512 (xpsp.080413-2105) 0.41%
5.1.2600.5512 (xpsp.080413-2105) 0.41%
5.1.2600.5512 (xpsp.080413-2105) 1.23%
5.1.2600.5512 (xpsp.080413-2105) 0.41%
5.1.2600.5512 (xpsp.080413-2105) 2.06%
5.1.2600.5512 (xpsp.080413-2105) 0.41%
5.1.2600.5512 (xpsp.080413-2105) 1.23%
5.1.2600.5512 (xpsp.080413-2105) 2.06%
5.1.2600.3311 (xpsp.080212-0004) 0.82%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 12.76%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.41%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.41%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegQueryValueExW, RegOpenKeyW, RegCloseKey, RegOpenKeyExW
comctl32.dll
InitCommonControlsEx
gdi32.dll
GetStockObject, SelectPalette, RealizePalette, BitBlt, GetObjectW, CreateCompatibleDC, SelectObject, GetDIBColorTable, CreatePalette, DeleteObject, GetClipBox, DeleteDC
kernel32.dll
QueryPerformanceCounter, LoadLibraryExW, FreeLibrary, ExitProcess, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, Sleep, GetProcAddress, GetModuleHandleW, LoadLibraryW, GlobalAlloc, GlobalLock, GetSystemPowerStatus, GetVersionExW, GlobalUnlock, GlobalFree, GetStartupInfoW, GetCommandLineW, GetModuleHandleA, GetTickCount, InterlockedCompareExchange, InterlockedExchange, DelayLoadFailureHook, LoadLibraryA
msvcrt.dll
DllMain
user32.dll
PeekMessageW, SendMessageW, DialogBoxParamW, GetParent, IsWindow, SetCursor, GetForegroundWindow, TranslateMessage, GetMessageW, SetForegroundWindow, FindWindowW, GetClientRect, CharNextW, ReleaseDC, DispatchMessageW, LoadStringW, MessageBoxW, EndDialog, DefWindowProcW, ShowWindow, SetRect, FillRect, DrawIcon, LoadImageW, RegisterClassW, CreateWindowExW, SetTimer, PostMessageW, GetSystemMetrics, LoadIconW, InvalidateRect, SetWindowPos, BeginPaint, EndPaint, GetDC, RegisterWindowMessageW, SystemParametersInfoW, GetCursorPos, PostQuitMessage, RegisterPowerSettingNotification, ChangeWindowMessageFilter, ValidateRect, DestroyWindow, UnregisterPowerSettingNotification, SetLayeredWindowAttributes

logon.scr

Logon Screen Saver by Microsoft

Remove logon.scr
Version:   6.0.6000.16386 (vista_rtm.061101-2205)
MD5:   3f0e37f1c68bc1f0356104d6cd322255
SHA1:   170db29229c4d5d489b7993db7d6ab94b4d0fb63
SHA256:   f33c4639786963504baa98ddb98d4adaff80878e0b09a2bf5406a54dd7116d2f
This is a Windows system installed file with Windows File Protection (WFP) enabled.

About logon.scr (from Microsoft)

“When you start Windows, you may be presented with the Windows XP welcome screen, which prompts you click your user name to begin, or you may be presented with a Welcome to Windows dialog box that prom”

Overview

logon.scr executes as a process with the local user's privileges typically within the context of its parent winlogon.exe (Windows Logon Application by Microsoft). This version is designed to run on Windows Vista and is compiled as a 64 bit program.

DetailsDetails

File name:logon.scr
Publisher:Microsoft Corporation
Product name:Logon Screen Saver
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\logon.scr
Original name:logon
File version:6.0.6000.16386 (vista_rtm.061101-2205)
Product version:6.0.6000.16386
Size:5.45 MB (5,710,336 bytes)
Digital DNA
PE subsystem:Windows GUI
Entropy:4.082956
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Screensaver
  • logon.scr

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.02796932%
0.028634%
Kernel CPU:0.02571326%
0.013761%
User CPU:0.00225606%
0.014873%
Kernel CPU time:920 ms/min
100,923,805ms/min
Memory
Private memory:7.13 MB
21.59 MB
Private (maximum):19.56 MB
Private (minimum):5.5 MB
Non-paged memory:7.13 MB
21.59 MB
Virtual memory:72.8 MB
140.96 MB
Virtual memory (peak):74.86 MB
169.69 MB
Working set:5.48 MB
18.61 MB
Working set (peak):19.71 MB
37.95 MB
Resource allocations
Threads:1
12
Handles:34
600
GUI GDI count:57
103
GUI USER count:4
49

BehaviorsProcess properties

Integrety level:Medium
Platform:64-bit
Command line:C:\Windows\System32\logon.scr /s
Owner:User
Parent process:winlogon.exe (Windows Logon Application by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 72.00%
Windows Vista Home Premium 15.00%
Windows XP Professional 4.50%
Windows Vista Home Basic 3.00%
Windows Vista Ultimate 2.00%
Windows Vista Business 2.00%
Windows XP Home Edition 0.50%
Windows Server 2003, Standard Edition 0.50%
Windows Server 2008 Standard 0.50%

Distribution by countryDistribution by country

United States installs about 45.25% of Logon Screen Saver.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 43.87%
Hewlett-Packard 10.32%
Intel 9.03%
ASUS 7.74%
Toshiba 7.74%
Sahara 3.87%
Gateway 3.87%
GIGABYTE 3.23%
American Megatrends 3.23%
Compaq 2.58%
Sony 2.58%
Acer 1.94%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE