this is pretty cool, i had never known about this before (yes, it works, i tried it): http://www.eeggs.com/items/13892.html

COOL!!..Just shows you what you can find..Who finds these things anyway??..lol

paul333

assuming it wasn't a numega person who leaked the egg, it was probably found like this:

looking in smartcheck's directory, one can see that SCBCE.DLL is unusually large (over a meg). checking it with a resource editor shows the avi easter egg. and further, checking its exports, we see one and only one function: ShowEgg

looking in SMARTCHK.EXE, we see ShowEgg at 401720h, proc-gotten and called in the function around 409934h (originally called by a message translator when you double right-click in the about dlg box). to call ShowEgg, it verifies that the mouse is over the bulb icon (PtInRect at 409918h) and the keystates (shift+ctrl makes [ebp+8]=0Eh for tests at 4098efh and 4098f5h).

tada