jibed2.exe

I couldn't find anything of use about this on the net, so I thought I'd post my findings.


I noticed this program called jibed2.exe had some ports open on my system, and I wanted to know why.

I did a "netstat -no" and got the following:

Active Connections Proto Local Address Foreign Address State PID
TCP 127.0.0.1:1047 127.0.0.1:26139 ESTABLISHED 2368
TCP 127.0.0.1:26139 127.0.0.1:1047 ESTABLISHED 2636
TCP 192.168.1.101:3920 67.28.122.34:80 CLOSE_WAIT 2920
TCP 192.168.1.101:3925 8.255.0.251:80 CLOSE_WAIT 2920
TCP 192.168.1.101:3927 67.28.122.35:80 CLOSE_WAIT 2920
TCP 192.168.1.101:3929 208.66.98.100:80 CLOSE_WAIT 2920
TCP 192.168.1.101:4727 209.183.226.152:80 TIME_WAIT
TCP 192.168.1.101:4766 66.7.158.37:443 SYN_SENT 2636

Then I went to task manager's processes tab to see what Process ID 2636 was. jibed2.exe! I checked the IP it was connected to and found it belonged to YIPES communications of San Francisco. Never heard of them.

A little more researched showed that this is part of the Knowledge Networks KN Messenger program that Jen has loaded for some of the surveys she takes. I consider it mostly safe. There are many other things out there that should worry you more than this.