TLHBalloonParent.exe

Discussion and feedback on Construct 2

Post » Sun Sep 08, 2013 5:59 pm

@Ashley
Please excuse the dozen of questions, but this is driving me crazy

What exactly is TLHBalloonParent.exe? Why is it started by C2 silently? And why does it need 6 or 7 copies of it running simultanously?

I'd prefer not to have executables started without my permission. On my system I have Balloon Tips disabled, because they are very annoying on XP. Because of the similar name I wonder if C2 tries to start a replacement for it? Or is it some kind of virus hitchhiking C2?

From what I can tell, those executables seem to be started whenever I use the color picker from the image editor. All copies exit when I exit C2.

And last question: How can I prevent TLHBalloonParent.exe from being started by C2?
Image
B
24
S
8
G
10
Posts: 1,821
Reputation: 8,279

Post » Sun Sep 08, 2013 6:23 pm

@tulamide

I don't see this, and the only reference from Google is from some russian forums.

Are you sure C2 is the cause?
If your vision so exceeds your ability, then look to something closer.
Moderator
B
134
S
30
G
84
Posts: 5,382
Reputation: 58,446

Post » Sun Sep 08, 2013 6:47 pm

[QUOTE=zenox98]Are you sure C2 is the cause?[/QUOTE] That question is more difficult to answer than it seems. I can say for sure that this executable gets started when using the color picker in the image editor and that all copies of it (sometimes it's 2, sometimes 6, depends on how many times I open the image editor) are automatically closed when C2 closes. So they are related to each other, but that doesn't automatically mean, C2 is the cause :)

Btw, the executables don't hide, they even show up in the applications tab of the task manager.

Yep, I did a web search too, and was quite surprised to not find any info (don't understand russian at all). That's why I alerted @Ashley. He might know the answers or at least can point out, that it has nothing to do with C2 (but why is it then only starting in the context of C2?)

EDIT: It seems, that Chrome is also involved somehow, because all of the above is more likely to happen, when I at least once invoke a preview via Chrome. It seems to not happen when Firefox is used for previewing. But it's hard to tell because it can take quite some time before it happens.tulamide2013-09-08 21:20:41
Image
B
24
S
8
G
10
Posts: 1,821
Reputation: 8,279

Post » Sun Sep 08, 2013 9:30 pm

Have you tried using C2 in another computer and checking if this still happens?

You've probably got a virus..
B
123
S
43
G
41
Posts: 847
Reputation: 28,206

Post » Sun Sep 08, 2013 9:38 pm

Just a suggestion: Try to find it on your computer and rename it, see what happens. It would also be interesting to know where it's installation path is.

It may not be a virus/trojan, but to be safe, download and run Kaspersky's free trojan killer called tdsskiller.exe.
If your vision so exceeds your ability, then look to something closer.
Moderator
B
134
S
30
G
84
Posts: 5,382
Reputation: 58,446

Post » Sun Sep 08, 2013 10:20 pm

I tried to find it. It doesn't exist. At least not as a file. As if they are generated on the fly.
I can stop the task and it immediatly closes, no other processes are started then. My AV suite doesn't detect anything. It's running all the time, but I also just made a full scan.
Google translate helped me understand the russian entries. It's about several users having the same problem I have, but unrelated to C2 (though I have no info to what else it is related, maybe Chrome). They also searched and scanned with no result. No file exists. They also have the impression of randomness like I have. Sometimes they show up, sometimes not.
Image
B
24
S
8
G
10
Posts: 1,821
Reputation: 8,279

Post » Sun Sep 08, 2013 10:29 pm

??? ????? ???? ??????

Also what preview method are you using?
Image ImageImage
B
169
S
50
G
169
Posts: 8,286
Reputation: 108,216

Post » Mon Sep 09, 2013 12:10 am

In Wirklichkeit erkennen wir nichts; denn die Wahrheit liegt in der Tiefe.

It's a bit over my head. Are there different methods? Might sound like a noob now, but this is what I've done:
Created the project. In the project's settings I chose Chrome for previewing. I hit the preview button to preview. After previewing I closed the tab in Chrome.

I would never had noticed about these executables, if I didn't wonder about the intense RAM usage (about 1 GB) after a few times previewing. So I opened the task manager. But to make this clear: The RAM issue is not related to TLHBalloonParent (each of them just uses a tiny amount of RAM).
In one of my tests, the process was as follows:
Opened the image editor in C2. Everything's fine. Selected a color and drawed a few pixels. Still fine. Previewed in Chrome. Again, all is good. Back to C2, opening the image editor, drawing a few pixel - voil, TLHBalloonParent.exe shows up.
But it is not reliable. Sometimes it happens, sometimes not. I don't see what is influencing the appearance of the executables. Also stopping the task doesn't harm any functionality. It's like ghosts. While they might do no harm, they definitely frighten you.
Image
B
24
S
8
G
10
Posts: 1,821
Reputation: 8,279

Post » Mon Sep 09, 2013 12:28 am

Well the reason I asked was because Chrome can have all those instances, and I guess Node-Webkit can as well.

But if it only happens when using the image editor then it would have to either be C2 related, or something specific to your system.

Hard to say which, Ashley hasn't told us much about what libs he uses for the editor, and there is a persistent bug with with C2 not closing properly after using the image editor.

Perhaps this is somehow related.
Image ImageImage
B
169
S
50
G
169
Posts: 8,286
Reputation: 108,216

Post » Mon Sep 09, 2013 11:52 am

I've never heard of it, so I'd guess it's not to do with C2. It's strange there's nothing on the web about it. Perhaps it's some kind of system add-on that you've got that hooks in to various programs.
Scirra Founder
B
395
S
232
G
88
Posts: 24,371
Reputation: 193,762

Next

Return to Construct 2 General

Who is online

Users browsing this forum: Darknessed, Lorvin and 6 guests