looks like we need to figure out the protocal it is asking for when it connects to that IP... because if the full version is running it must send a query and the server responds giving an "all clear" to use the program... if someone has the full program...please run a capture on your network to see what is beeing sent back and forth... and we can figure out how to emulate that... I.E. a virtual IP on your comp to imitate the 9net9 response... thats a theory too... and if someone can get that and send it to me... I can try to figure it out... I actually know that stuff... hex editing no... but network query's I do... thx