From the doc: 'Runs invisibly as 'winsystem'. Coded in Visual Basic 6. Therefore needs msvbvm60.dll. It uses the GetASyncKeyState API. Compiled as klow.exe Gives the letters as they are typed. All known standard keys supported. Gives date and time logging has started, ended.. Makes a key in the registry and restarts everytime the computer is put on'.
ist2.exeskl0g.exe