There's a ... let's say sniffer, that the antivirus programs detect in the fire.dll file in the system folder that they let you download in order to play on dex servers. I don't know if there's a program, that hides processes and if there is - are they hidden for real or only from the task manager, so that Dex's sniffer would still be able to see that there's that l2net.exe process going on.
The problem is not ONLY in the ipjack ... I've started the clients, installed the filter, then closed the ipjack... after few minutes of game time with the bot working - the client closes by the protection and a window pops up, saying that explorer.exe isn't allowed when playing on dex ... which is the-WTF-effect