Archive for category The Medic Speaks

What the Hell is a Worm and what is it Doing on my Computer?

As anybody who uses a computer these days knows, there is a lot of harmful software out there. The terminology is a bit confusing: adware, spyware, viruses, trojans, worms, rootkits, exploits, redirects, hijacks, to name a few of the more common forms of malware. What the hell is this stuff, how does it get on your computer, and how can you get rid of it?

Malware (”malicious software“) has been around almost as long as computers have. But it has changed drastically changed over the years. Once upon a time, most malware was basically digital vandalism, whose purpose was to wreak general havoc, as well to call attention to its creator and show off his programming skills. The programs were simple, easily defeated, and generally speaking, fairly harmless. But with the rise of the Internet, criminals became aware of the vast possibilities for making money using various forms of malware. The schemes have gotten progressively more sophisticated as the stakes have risen. Now, the making and distribution of malware is a multibillion-dollar business, controlled by international criminal syndicates. It is a virtual arms race, and the end is nowhere in sight.

“How DOES this happen?” I often hear. Most malware arrives via the Internet, as you might imagine. Viruses typically arrive in infected email attachments, or buried in programs downloaded from non-legitimate sites. Much of the malware that travels via infected email practically announces itself; it comes from someone you don’t know, or have no reason to hear from. The subject line doesn’t quite make sense or is poorly written, contains an unseemly invitation, or demands that you do something RIGHT NOW. And there is always an attachment. It’s the attachment that contains the tainted payload. As long as the attachment is unopened, nothing happens. Viruses and worms are spread in this way. A virus replicates by infecting executable programs on the host computer, whereas a worm propagates from computer to computer across a network connection, typically in a work environment.

Viruses and worms require some action by a user to spread. But more and more, malware is delivered surreptitiously, without any overt action by the recipient. NEXT Stealth Infections: Trojans, Rootkits, and Backdoors.

Tags: , , ,

No Comments

How much RAM do I need?

Among the most frequently-asked questions in this business is: How much RAM do I need. the answer is, of course, it depends.

RAM (Random Access Memory) is temporary storage that the computer uses as workspace. If a hard drive, discussed in our last post, is like a file cabinet, RAM is like a desk–the larger the desk’s surface, the more projects you can work on at a time. The more RAM, the more workspace, the more data available to be worked on immediately.

A common perception is that adding RAM to a computer will increase its speed. This is sort of true, but only up to a point. To properly function, a computer needs a certain amount of temporary storage that it can use as working memory to store the data it is working on. The computer uses a mix of actual RAM and virtual memory for this purpose. Virtual memory is dedicated space on the hard drive that acts like RAM, hence “virtual” memory. A computer with insufficient actual RAM to carry out all its tasks will need to use virtual RAM in its place.  Which is fine, except that a hard drive, being a mechanical device, stores and retrieves data perhaps 100 times slower than RAM, which is entirely electronic. The result is a major slowdown.

If, like most people, you are still using Windows XP you probably need less RAM than you think. If all you do is surf the web, do email, occasionally listen to Itunes, and run Microsoft Office, you can get by with 512 megabytes (MB) of RAM. If you have less RAM than that, then you probably need to add a little more in any case. If you like to have lots of programs open at once, or use resource-intensive programs like Photoshop, then you probably need a gigabyte (GB) of RAM or more. Adding more memory than your system needs will not increase its performance, but not having enough will slow it down.

Note that unless you are running a “64-bit” operating system, your system will not be able to make use of more than 3 GB of RAM. Any more than that is just wasted. (A 64-bit operating system is one that moves data in 64-bit chunks, as opposed to the more common 32-bit.)  Only a couple of versions of Windows are 64-bit: Vista Ultimate and XP Professional 64-Bit. Most versions of Linux, as well as Mac OS 10, are 64-bit. Upcoming Windows 7 will also be 64-bit.

Tags: , , , ,

No Comments

To defrag or not?

People often ask me how important it is to defragment (”defrag”) their systems. The answer is very. Or not very. Depending. First of all, what is defragmentation, and why do we need to do it at all?

The first thing you need to know is that a hard drive is a mechanical device, consisting of  a glass or metal disk honed to a microscopically smooth finish and coated with magnetic material (the same stuff that audio and video tape are made of). The alignment of the crystals in the magnetic material determines whether a given chunk is read as a 0 or as a 1. All digital data consists of strings of 0s and 1s arranged into meaningful patterns. A read/write head pivots back and forth over the drive surface to encode and decode the magnetic signals on the disk. Data is recorded as a series of concentric rings (tracks) centered around the drive spindle.

Second, not all parts of the hard drive deliver data to the system at the same speed. The outer edge of the spinning hard drive moves at a faster actual speed than the inner part, and therefore can deliver data faster. For this reason, the system preferentially writes data to that part of the drive. The system also typically makes every effort to write data into continuous stripes within a given track. However, if a track gets filled up before a block of data can be completely written, then the system must find another track on the drive to write the remaining data. The system has no way of knowing how much space it will need to record a given chunk of data, so it frequently has to break the data into separate pieces to make it all fit. “Fragmentation” occurs when data that logically belongs together becomes physically separated as it is written to the hard drive. Fragmentation slows the process of data retrieval down because it requires a certain amount of time to reposition the read/write head as it scans across the various tracks of the hard drive. “De-fragmentation” is the process of assembling all of those separated pieces of data into continuous blocks, preferably in the faster part of the disk.

Fragmentation really becomes a problem as the drive approaches capacity. The available blocks of free space become few in number and widely scattered, forcing the hard drive to work constantly even under periods of low demand. Long before the typical system displays the “disk full” error message, it has grown painfully slow due to intense fragmentation.

The Windows operating system is a very dynamic environment. Typically, dozens of read/write actions take place every second of operation. Temporary files are written and erased again and again. Windows also maintains a number of permanent files as part of it’s normal operation; these typically grow in size over time. Normally, they are hidden from the user but if you deselect the “Hide protected Windows system files” option under Folder Options, they become visible. Users’ data files also become fragmented as they are added to over time. A heavily used system can become fragmented quickly.

You can limt fragmentation and the slowness that comes with it by keeping your hard drive from filling up. My rule of thumb is this: If the drive is over half-full, it’s time either to start deleting stuff, or to get a larger drive. Hey storage is cheap. A terabyte–a trillion bytes of storage–costs less than $100. Stop to think about just how large a number a terabyte is.

Tags: , , , ,

No Comments

Welcome!

Welcome to Computer Medic’s blog. I was, as it turns out, the last person on the planet to have a blog. Fortunately that has now been corrected.

No Comments