Just downloaded the trial of Port Explorer and have a quick question. (Forgive me if the answer's in the documentation somewhere - I've only just glossed over it at this stage). The question relates to displaying use of hidden sockets (displayed as Red): I wonder given the displays quick refresh rate whether a trojan or other process could use a hidden socket to do it's thing and close down without you noticing. Surely this could happen. How long does the warning (red text) remain on screen and is there any audible alrm or some other notification to tell you when such an event happens ? I don't really see reading through the logs at the end of each session as a practical option. How do others manage this situation? Thanks for help.