Is only the Windows binary in question or the sources themselves too? (I compiled yacoind myself)
I looked through the source and it's clean.
Though I can't say for certain with the prebuilt binaries, there was an 'antivirus friendly' minerd going around that triggers alerts in Virus Total, most likely that was it.
Why would you even download something that the author calls antivirus friendly? Extremely suspect.