What are the settings for the lock bits to make it so you cannot "extract" the hex file? Is that even possible? Basically, just making it burn only... not read.
Assuming you mean an ATmega328P, the lock bits are documented in Section 26.5 of the datasheet:
Check out our new shield: http://www.ruggedcircuits.com/html/gadget_shield.html