Files were created in the modified worm with the same name as Parsons’ domain name and IRC handle, and infected machines registered themselves with a host in Parsons’ domain, which is registered in his own name and to his home address. The front page of Parsons’ web site is presently the default Apache installation page, but the Google cache reveals an interest in software for covert mass remote control, including IRCbots, Worms and Viruses.