Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.0.6000.16386 (vista_rtm.061101-2205) 13.17%
6.0.6000.16386 (vista_rtm.061101-2205) 4.53%
6.0.6000.16386 (vista_rtm.061101-2205) 2.06%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.41%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.41%
5.1.2600.5577 (xpsp_sp3_qfe.080408-1616) 0.82%
5.1.2600.5512 (xpsp.080413-2105) 54.73%
5.1.2600.5512 (xpsp.080413-2105) 1.23%
5.1.2600.5512 (xpsp.080413-2105) 0.41%
5.1.2600.5512 (xpsp.080413-2105) 0.41%
5.1.2600.5512 (xpsp.080413-2105) 1.23%
5.1.2600.5512 (xpsp.080413-2105) 0.41%
5.1.2600.5512 (xpsp.080413-2105) 2.06%
5.1.2600.5512 (xpsp.080413-2105) 0.41%
5.1.2600.5512 (xpsp.080413-2105) 1.23%
5.1.2600.5512 (xpsp.080413-2105) 2.06%
5.1.2600.3311 (xpsp.080212-0004) 0.82%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 12.76%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.41%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.41%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegQueryValueExW, RegOpenKeyW, RegCloseKey, RegOpenKeyExW
comctl32.dll
InitCommonControlsEx
gdi32.dll
GetStockObject, SelectPalette, RealizePalette, BitBlt, GetObjectW, CreateCompatibleDC, SelectObject, GetDIBColorTable, CreatePalette, DeleteObject, GetClipBox, DeleteDC
kernel32.dll
QueryPerformanceCounter, LoadLibraryExW, FreeLibrary, ExitProcess, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, Sleep, GetProcAddress, GetModuleHandleW, LoadLibraryW, GlobalAlloc, GlobalLock, GetSystemPowerStatus, GetVersionExW, GlobalUnlock, GlobalFree, GetStartupInfoW, GetCommandLineW, GetModuleHandleA, GetTickCount, InterlockedCompareExchange, InterlockedExchange, DelayLoadFailureHook, LoadLibraryA
msvcrt.dll
DllMain
user32.dll
PeekMessageW, SendMessageW, DialogBoxParamW, GetParent, IsWindow, SetCursor, GetForegroundWindow, TranslateMessage, GetMessageW, SetForegroundWindow, FindWindowW, GetClientRect, CharNextW, ReleaseDC, DispatchMessageW, LoadStringW, MessageBoxW, EndDialog, DefWindowProcW, ShowWindow, SetRect, FillRect, DrawIcon, LoadImageW, RegisterClassW, CreateWindowExW, SetTimer, PostMessageW, GetSystemMetrics, LoadIconW, InvalidateRect, SetWindowPos, BeginPaint, EndPaint, GetDC, RegisterWindowMessageW, SystemParametersInfoW, GetCursorPos, PostQuitMessage, RegisterPowerSettingNotification, ChangeWindowMessageFilter, ValidateRect, DestroyWindow, UnregisterPowerSettingNotification, SetLayeredWindowAttributes

logon.scr

Logon Screen Saver by Microsoft

Remove logon.scr
Version:   5.1.2600.5512 (xpsp.080413-2105)
MD5:   c692e9f937a9dd03d08db6fdc3bdfe87
SHA1:   48b3167c3346c763cb12368ea9ba265e585213e7
This is a Windows system installed file with Windows File Protection (WFP) enabled.

About logon.scr (from Microsoft)

“When you start Windows, you may be presented with the Windows XP welcome screen, which prompts you click your user name to begin, or you may be presented with a Welcome to Windows dialog box that prom”

Overview

logon.scr executes as a process with the local user's privileges. This version is installed on Windows XP and is compiled as a 32 bit program.

DetailsDetails

File name:logon.scr
Publisher:Microsoft Corporation
Product name:Logon Screen Saver
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\logon.scr
Original name:logon
File version:5.1.2600.5512 (xpsp.080413-2105)
Product version:5.1.2600.5512
Size:215.5 KB (220,672 bytes)
Build date:4/13/2008 9:36 PM
Digital DNA
PE subsystem:Windows GUI
Entropy:4.082956
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Screensaver
  • logon.scr

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00033193%
0.028634%
Kernel CPU:0.00024894%
0.013761%
User CPU:0.00008298%
0.014873%
Kernel CPU time:94 ms/min
100,923,805ms/min
Memory
Private memory:648 KB
21.59 MB
Private (maximum):2.18 MB
Private (minimum):2.18 MB
Non-paged memory:648 KB
21.59 MB
Virtual memory:17.49 MB
140.96 MB
Virtual memory (peak):17.95 MB
169.69 MB
Working set:2.18 MB
18.61 MB
Working set (peak):2.18 MB
37.95 MB
Resource allocations
Threads:1
12
Handles:17
600
GUI GDI count:12
103
GUI USER count:2
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:C:\Windows\System32\logon.scr /s
Owner:User
Parent process:winlogon.exe (Windows NT Logon Application by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 72.00%
Windows Vista Home Premium 15.00%
Windows XP Professional 4.50%
Windows Vista Home Basic 3.00%
Windows Vista Ultimate 2.00%
Windows Vista Business 2.00%
Windows XP Home Edition 0.50%
Windows Server 2003, Standard Edition 0.50%
Windows Server 2008 Standard 0.50%

Distribution by countryDistribution by country

United States installs about 45.25% of Logon Screen Saver.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 43.87%
Hewlett-Packard 10.32%
Intel 9.03%
ASUS 7.74%
Toshiba 7.74%
Sahara 3.87%
Gateway 3.87%
GIGABYTE 3.23%
American Megatrends 3.23%
Compaq 2.58%
Sony 2.58%
Acer 1.94%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE