Mark Russinovich

IRL Name: 
Mark Russinovich

Mark Russinovich wrote useful tools for the windows platform which are useful for debugging and repair, including Process Explorer, Autoruns, and Rootkit Explorer. In 1996, Russinovich discovered that altering two values in the Windows Registry of the Workstation edition of Windows NT 4 would change the installation so it was recognized as a Windows NT Server and allow the installation of Microsoft BackOffice products which were licensed only for the Server edition.


Sued Best Buy because they used his tools without paying royalties.

Found the Sony Rootkit.

Now works for Microsoft when his company (Winternals) was acquired by M$.

Author of various windows related books.


Secretly writes rootkits that his own tools can't detect.