This is a case where the rules of grammar and normal usage are miles apart.
Your first sentence seems grammatically acceptable, but no native speaker would ever say it.
Your second suggestion, though grammaticaly incorrect, is perfectly normal and acceptable.
I can't think of any better way to say it. "Whom" is, without doubt, a difficult word. I suspect most English speakers never use it at all.
In summary, if you are not sure about whether to use "who" or "whom", you should choose "who". If you use "who" when it should be "whom", you may at the worst sound a little too informal. If you use "whom" when it should be "who", you will sound ridiculous.