If I perform the following grep on my Linux box:
$ ps -ef | grep bash root 2286 1 0 Jun06 ? 00:03:15 /bin/bash /etc/init.d/zxy100wd wmiller
Fedorqui nails it with the explanation of the character class trick. I just wanted to point out the other method I used quite often albeit a bit longer than what you already know was to use -v option of grep command.
-v
grep
ps -ef | grep bash | grep -v grep