Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.0.6000.16386 (vista_rtm.061101-2205) 13.17%
6.0.6000.16386 (vista_rtm.061101-2205) 4.53%
6.0.6000.16386 (vista_rtm.061101-2205) 2.06%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.41%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.41%
5.1.2600.5577 (xpsp_sp3_qfe.080408-1616) 0.82%
5.1.2600.5512 (xpsp.080413-2105) 54.73%
5.1.2600.5512 (xpsp.080413-2105) 1.23%
5.1.2600.5512 (xpsp.080413-2105) 0.41%
5.1.2600.5512 (xpsp.080413-2105) 0.41%
5.1.2600.5512 (xpsp.080413-2105) 1.23%
5.1.2600.5512 (xpsp.080413-2105) 0.41%
5.1.2600.5512 (xpsp.080413-2105) 2.06%
5.1.2600.5512 (xpsp.080413-2105) 0.41%
5.1.2600.5512 (xpsp.080413-2105) 1.23%
5.1.2600.5512 (xpsp.080413-2105) 2.06%
5.1.2600.3311 (xpsp.080212-0004) 0.82%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 12.76%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.41%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.41%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegQueryValueExW, RegOpenKeyW, RegCloseKey, RegOpenKeyExW
comctl32.dll
InitCommonControlsEx
gdi32.dll
GetStockObject, SelectPalette, RealizePalette, BitBlt, GetObjectW, CreateCompatibleDC, SelectObject, GetDIBColorTable, CreatePalette, DeleteObject, GetClipBox, DeleteDC
kernel32.dll
QueryPerformanceCounter, LoadLibraryExW, FreeLibrary, ExitProcess, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, Sleep, GetProcAddress, GetModuleHandleW, LoadLibraryW, GlobalAlloc, GlobalLock, GetSystemPowerStatus, GetVersionExW, GlobalUnlock, GlobalFree, GetStartupInfoW, GetCommandLineW, GetModuleHandleA, GetTickCount, InterlockedCompareExchange, InterlockedExchange, DelayLoadFailureHook, LoadLibraryA
msvcrt.dll
DllMain
user32.dll
PeekMessageW, SendMessageW, DialogBoxParamW, GetParent, IsWindow, SetCursor, GetForegroundWindow, TranslateMessage, GetMessageW, SetForegroundWindow, FindWindowW, GetClientRect, CharNextW, ReleaseDC, DispatchMessageW, LoadStringW, MessageBoxW, EndDialog, DefWindowProcW, ShowWindow, SetRect, FillRect, DrawIcon, LoadImageW, RegisterClassW, CreateWindowExW, SetTimer, PostMessageW, GetSystemMetrics, LoadIconW, InvalidateRect, SetWindowPos, BeginPaint, EndPaint, GetDC, RegisterWindowMessageW, SystemParametersInfoW, GetCursorPos, PostQuitMessage, RegisterPowerSettingNotification, ChangeWindowMessageFilter, ValidateRect, DestroyWindow, UnregisterPowerSettingNotification, SetLayeredWindowAttributes

logon.scr

Logon Screen Saver by Microsoft

Remove logon.scr
Version:   5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
MD5:   43fceef75fd6208925ddd4fff8c36723
SHA1:   a626310ed5cc7fbde05dcc576cebe35594198d72
SHA256:   ce99922a414945e27b4ace2589be7bfcc64530e73913726bee872db91c3873bd
This is a Windows system installed file with Windows File Protection (WFP) enabled.

About logon.scr (from Microsoft)

“When you start Windows, you may be presented with the Windows XP welcome screen, which prompts you click your user name to begin, or you may be presented with a Welcome to Windows dialog box that prom”

Overview

logon.scr executes as a process with the local user's privileges. This version is installed on Windows XP and is compiled as a 32 bit program.

DetailsDetails

File name:logon.scr
Publisher:Microsoft Corporation
Product name:Logon Screen Saver
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\logon.scr
Original name:logon
File version:5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Product version:5.1.2600.2180
Size:215.5 KB (220,672 bytes)
Digital DNA
PE subsystem:Windows GUI
Entropy:4.082956
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Screensaver
  • logon.scr

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00097955%
0.028634%
Kernel CPU:0.00066043%
0.013761%
User CPU:0.00031912%
0.014873%
Kernel CPU time:51 ms/min
100,923,805ms/min
Context switches:3/sec
284/sec
Memory
Private memory:599.2 KB
21.59 MB
Private (maximum):2.2 MB
Private (minimum):2.2 MB
Non-paged memory:599.2 KB
21.59 MB
Virtual memory:16.85 MB
140.96 MB
Virtual memory (peak):16.86 MB
169.69 MB
Working set:2.2 MB
18.61 MB
Working set (peak):2.2 MB
37.95 MB
Page faults:582/min
2,039/min
I/O
I/O read transfer:39 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O other transfer:394 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:1
12
Handles:24
600
GUI GDI count:14
103
GUI USER count:4
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:C:\Windows\System32\logon.scr /s
Owner:User
Parent process:winlogon.exe (Windows NT Logon Application by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 72.00%
Windows Vista Home Premium 15.00%
Windows XP Professional 4.50%
Windows Vista Home Basic 3.00%
Windows Vista Ultimate 2.00%
Windows Vista Business 2.00%
Windows XP Home Edition 0.50%
Windows Server 2003, Standard Edition 0.50%
Windows Server 2008 Standard 0.50%

Distribution by countryDistribution by country

United States installs about 45.25% of Logon Screen Saver.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 43.87%
Hewlett-Packard 10.32%
Intel 9.03%
ASUS 7.74%
Toshiba 7.74%
Sahara 3.87%
Gateway 3.87%
GIGABYTE 3.23%
American Megatrends 3.23%
Compaq 2.58%
Sony 2.58%
Acer 1.94%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE