from the doc: 'This plugin retrieves the keystrokes the user/victim will be hitting. The keys are stored in their percentWINDIRpercentwsock2 32.dll just download that file after the user has rebooted or you select the stop button and view it with a normal text editor. You can not get the keys without you hitting stop or them rebooting.'
BackDoor-EE trojanTrojan Horse [Panda]