Is AOL Instant Messenger Spyware? No, but there are some general IM concerns:
Did you know it’s easier to get a virus through AIM than through email? Recently we have seen many cases of the W32/Rbot-ATH (Opanki) virus which comes in as an AIM file transfer from someone who has you as a “buddy”.
It’s similar to getting a virus from an email attachment, but even less secure. AIM file transfers are direct from computer to computer so we have no way to block the virus at the server level. At least with email we scan all attachments and block harmful types like .exe. Apply the same caution as with email attachments: if you get a message from one of your buddies and it has a file attached, don't open it unless you know what it is and why you received it. Even then it’s best to check with the sender. With AIM the level of protection works like this: 1. your common sense 2. the anti-virus program on your computer.
Sophos anti-virus will block files with known viruses from opening after you receive them, but often anti-virus companies are several days behind in protection from the newest threats.
AIM is not necessarily more vulnerable than other chat programs, but it tends to be the one most targeted by virus authors. MSN, Yahoo and Trillian allow file transfers as well, and because of that they are all inherently insecure.