My guess would be that Yahoo is one of the few search engines with some sort of affiliate program, so if the scammers can get a browser to redirect all searches - with their affiliate code attached - they can make extra money after the initial infection. Maybe Yahoo’s has some of the loosest requirements for signups, which would explain why it shows up most often?