Hidden process in red?

Discussion in 'Port Explorer' started by Rilla927, Jan 12, 2006.

Thread Status:
Not open for further replies.
  1. Rilla927

    Rilla927 Registered Member

    Joined:
    May 12, 2005
    Posts:
    1,710
    Hi everyone!

    I spotted one hidden process in Red in PE and it was weatherbug from weatherbug.com. Why would it be hidden and in red? I thought the red one's were the bad ones. I have never noticed it before.;)
     
  2. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Hi Rilla,
    Does it have a systray icon? If so and you click the systray icon it should turn to normal.
    You might like to enable spying on it for a short while to see what data is transmitted and decide whether it's innocent enough. :cautious:
     
  3. Rilla927

    Rilla927 Registered Member

    Joined:
    May 12, 2005
    Posts:
    1,710
    Yes
    Yes, sometimes it has a problem loading though.

    I did as you said Jooske and I seen a bunch of svchost and weatherbug.com.

    Thanks so much Jooske:)
     
  4. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Weatherbug is discussed a lot. Spyware not, adware yes, and some more.
    http://www.pchell.com/support/weatherbug.shtml
    http://netrn.net/spywareblog/archives/2005/05/30/aol-verisign-truste-direct-revenue/
    http://www.searchlores.org/weatherbug.htm
    These threads have some discussions, the third a review with screenshots and examples what the program is doing.
    So your spy report should show in fact only traffic to your system and not collecting from your system, but to get adequate advertisement to your system it should know a bit about your habits and interest and thus should it follow you somewhat .......
    If it's not loading pretty as you would like it can be caused by some of your security settings. :gack:
     
  5. hardhead

    hardhead Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    292
    Location:
    Blue Ridge, Va
  6. Hermescomputers

    Hermescomputers Registered Member

    Joined:
    Jan 9, 2006
    Posts:
    1,069
    Location:
    Toronto, Ontario, Canada, eh?
    I would consider the "Free" Konfabulator with its cool Weather report... Mine reports 7 cities right now with full forcast for 7 days. Very acurate so far...
    It uses widgets and a few strange things happen but after scoping all of it for a couple of weeks now all is clean.

    To download main applet:
    http://widgets.yahoo.com/

    Here is a page of Weather related widgets... All pretty cool and they work!
    http://widgets.yahoo.com/gallery/index.php?search=weather&x=6&y=11

    Enjoy!
     
  7. Wayne - DiamondCS

    Wayne - DiamondCS Security Expert

    Joined:
    Jul 19, 2002
    Posts:
    1,533
    Location:
    Perth, Oz
    Red means the process is hidden. That is, it doesn't have any components (such as windows) that are visible and within the on-screen region of your screen. For this reason trojans and worms nearly always appear as red, although it doesn't necessarily mean that a red process is a trojan/worm. The only exception to this is system tray icons, as there is no documented or easy way to programatically determine which processes have active system tray icons (which are controlled by the explorer.exe process).

    Best regards,
    Wayne
     
  8. Rilla927

    Rilla927 Registered Member

    Joined:
    May 12, 2005
    Posts:
    1,710
    Sorry took so long to get back, I will post something sometimes and forget about it, I think I'm getting Alzheimers.

    The traffic was legitamate Jooske, Thanks.

    Rilla927
     
  9. Rilla927

    Rilla927 Registered Member

    Joined:
    May 12, 2005
    Posts:
    1,710
    @Hardhead and Hermescomputers


    thanks for the links, they are both neat. I have both.;)

    Rilla927
     
  10. Rilla927

    Rilla927 Registered Member

    Joined:
    May 12, 2005
    Posts:
    1,710
    Your precise explanations always help to understand better, thanks Wayne!:)

    Rilla927
     
  11. Hermescomputers

    Hermescomputers Registered Member

    Joined:
    Jan 9, 2006
    Posts:
    1,069
    Location:
    Toronto, Ontario, Canada, eh?
    No trouble at all!
     
Thread Status:
Not open for further replies.