If you have a packet capture of the traffic you can see if the user name is handled in plain text. If it is you can build a custom signature to drop packets containing that text, plus some other Yahoo protocol specifics.
If you don;t inlcude some Y! specifics you run the risk of dropping legitimate traffic that just happens to have that character string in the payload.
- Bob
