im sorry i forgot to post here that i have done it, i used that security flaw.

I had done this once and i didn't renamed the logon.scr again, that's why i couldn't find that file, he was renamed
But thanks for all the replys