You don't need to make a TSR in in windows. It's multi-tasking, and handles many programs concurrently - no hassle. So just forget about TSR, it's not used in windows. The keyloggers and mail clients you're talking about are ordinary programs, no steps need to be taken.