Some keylogers have a client which listens to a server part of it which logs and sends the data. Kinda like how sub7 clients send commands while the servers listen and obey and the fact that it might be takeing advantage of your browser and mailing things like a worm doesn't help....

This can make some AV go crazy but if your havein problems or are being spied on then why not just get rid of it.