I said this once, but I will say this again.

.SCR is the file extension for a screen saver. It is NOT a registrated file type for some script interpreter by default in Windows. For Java Script the extension is .JS and for VBScript it's .VBS. .SCR is executable code that is usually written in C++, but you could create screen savers with virtually any language.

Because it's executable code it will be executed and using your permissions.

About Outlook --> it's true that the Outlook does not always show the real file extension, if the file is named e.g. file.txt.exe or something. In this case Outlook might show file.txt which is obviously wrong and might trick user to click the file.

- karnevil9