I think I have an AIM virus?

[imotic]

Recently I tried installing an old version of AIM (5.5.3572) as well as DeadAIM 4.5, which I downloaded from www.aimthings.com . The DeadAIM process complained about a missing or invalid file "comdlg32.ocx". After that, when I would run AIM, AIM would run invisibly, without a Sign On dialog popping up. Instead, I could see the process running in the Task Manager (in the Processes tab, not in the Applications tab), but I couldn't see it running anywhere else.

Before all of this happened, I could successfully run the new version of AIM (5.9) on this laptop. Now, no amount of uninstalling, reinstalling, re-downloading or deleting items in the registry that pertain to "AIM" will make this work.

This is a brand new laptop, I just got it on Monday. I installed McAfee virus scanner and AdAware after this whole thing happened, they detect nothing.

After this happened, I tried installing again while running Ethereal, a packet sniffer. I don't see anything too crazy when running the AIM install... I see a lot of requests being sent to the WildTangent website, but I expect that seeing as how AIM uses WildTangent for its games stuff.

The really weird thing, however, is that when AIM is running, I see things like "Offgoing Buddy: Schleve23" and "Oncoming Buddy: MESoRb82". Neither of those two users are on my buddy list.

I looked into comdlg32.ocx... the last modified date is last monday, right around when I upgraded to XP SP2, and the version is "6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)". The version on my desktop machine (which works fine) is "6.00.8418" with a last-modified date of 1999... and that's running WinXP SP2 as well. This could be because I'm running Windows XP Tablet edition on my laptop, though.

I'm thinking that something is fishy.

[gossipingrae]

if you run mcafee and adaware and nothing shows up, try visiting www.jayloden.com and click on AIMFIX or something along the lines of that. this guy is seriously a genious, and if he keeps this thing updated as he says he does, his tool SHOULD detect if AIM has a virus. try that and let us know if it works.

[imotic]

I just tried AIMFix.. I think it found something called "agrsmmsg" or something similar- does that sound familiar to anyone? It deleted the registry references but couldn't delete the file, so it suggested booting into safe mode. Unfortunately it doesn't seem that this laptop can do that- when I pressed F8, it gave me the option of choosing which operating system I wanted to boot into- the only choice was "Windows XP". When the OS finished loading, I tried deleting the file manually and reinstalling AIM... but I still get the same exact problem, so it's not quite fixed.

[Quiksilver]

thats maybe because the program is running, try pressing ctrl+alt+delete and then end anything that youre not sure what it is (none of the system stuff..thats dangerous) then try deleting the file again..might work like that, it does fo rme when I get files like that *sneak sneaky*
-quiksilver-

<quiksilver: feels sneaky>

[imotic]

i'm pretty sure I successfully deleted the file it was talking about, but nothing has changed. I'm still getting the same problem. Thanks, though.:/

[Quiksilver]

*ahem* maybe you should search your computer for any other viruses than AIM viruses and maybe an older version of AIM will work from www.oldversion.com then reinstall dead aim again and everything... some programs are better than mcafee...like spybot I think is better, but I forgot the site for it *sigh* someone should post it if they know it and maybe you have to live without DeadAIM... just kill it and then your AIM should work normally, or just switch to trillian (...ad less...cool trillian) but I dont think you want that...well try what I said tell us if it works, were gonna figure this out!!! dont worry...
-quiksilver-

[David]

quote:Originally posted by dragonreborn

*ahem* maybe you should search your computer for any other viruses than AIM viruses and maybe an older version of AIM will work from www.oldversion.com then reinstall dead aim again and everything... some programs are better than mcafee...like spybot I think is better, but I forgot the site for it *sigh* someone should post it if they know it and maybe you have to live without DeadAIM... just kill it and then your AIM should work normally, or just switch to trillian (...ad less...cool trillian) but I dont think you want that...well try what I said tell us if it works, were gonna figure this out!!! dont worry...
-quiksilver-

McAfee is an AntiVirus solution while Spybot Search & Destroy is an Adware/Spyware removal utility, they cannot be compared, only running an adware/spyware program instead of an anti-virus program on your computer is extremely foolish.

[Quiksilver]

ah yes me not genius david *innocent smile* well I still think he shoudl check for spyware because that mite have something to do with something because AIM is REALLY spyware(ish) now...yesm...indeedy... just recomendation by the allmighty quiksilver...from penguinland down south...*cough* yeah imotic please respond and tel us if anything works...
-quiksilver-

[BoSoxRule2004]

I have also had problems using older versions of aim messenger. I did get the newest version to work, but I really wish that I could use the older version insted. Anyone have any ideas on what could be done to solve this problem.

Originally Posted by imotic

Recently I tried installing an old version of AIM (5.5.3572) as well as DeadAIM 4.5, which I downloaded from www.aimthings.com . The DeadAIM process complained about a missing or invalid file "comdlg32.ocx". After that, when I would run AIM, AIM would run invisibly, without a Sign On dialog popping up. Instead, I could see the process running in the Task Manager (in the Processes tab, not in the Applications tab), but I couldn't see it running anywhere else.

Before all of this happened, I could successfully run the new version of AIM (5.9) on this laptop. Now, no amount of uninstalling, reinstalling, re-downloading or deleting items in the registry that pertain to "AIM" will make this work.

This is a brand new laptop, I just got it on Monday. I installed McAfee virus scanner and AdAware after this whole thing happened, they detect nothing.

After this happened, I tried installing again while running Ethereal, a packet sniffer. I don't see anything too crazy when running the AIM install... I see a lot of requests being sent to the WildTangent website, but I expect that seeing as how AIM uses WildTangent for its games stuff.

The really weird thing, however, is that when AIM is running, I see things like "Offgoing Buddy: Schleve23" and "Oncoming Buddy: MESoRb82". Neither of those two users are on my buddy list.

I looked into comdlg32.ocx... the last modified date is last monday, right around when I upgraded to XP SP2, and the version is "6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)". The version on my desktop machine (which works fine) is "6.00.8418" with a last-modified date of 1999... and that's running WinXP SP2 as well. This could be because I'm running Windows XP Tablet edition on my laptop, though.

I'm thinking that something is fishy.