Anti-Leech Decryptor?

[aldente]

Naw, that's impossible, the tool uses normal Windows-network/internet-stuff to download, if you didn't see the real ip you just didn't use that sniffer properly. ALL that tcp/ip-stuff can be monitored as long as no special driver is used, without any exception.
Maybe you could not recognize it, because the files were hosted on a web-server with SSL encryption, but you should definately see the encrypted traffic anyway (or the clear traffic in case of HTTP or FTP).

If you want a proof, send me the link to that file and I'll send you the true url.