Romaco Keylogger operates as a standalone executable, so it is very portable and discrete. It can also hide itself so well that the only way to see it again is to effectively 'mash' the pause/break key on the keyboard, something a normal user is not...