http://BufFet.SerVeHttp.com/{numbers}

BKDR_CYSXL.A connects to this site to send and receive information. Once it establishes a connection, it can execute several backdoor commands such as create directories, create/delete files, and create process(es).