It's generally logo.sys, sometimes winboot.sys...They're actually bitmap images, so open them manually in Paintbrush or something. Or, you could rename them to logo.bmp and then double-click it.
There's one for the startup, one for the shutdown process, and one for "It's safe to turn off your computer."
This is different for Win2K and NT, of course.

__________________
"And knowing is half the battle!"