If it's logging locally, go to find-file and search for all files modified in the past minute.<P>If you find any suspicous looking files, use e.g. HandleEx to find out what process has a handle to ...

Keystroke logging is a silent (but serious) cyberthreat – here's everything you need to know about how it works and how you can prevent it.