At a first glance this looks like a keylogger to me. When your system was already successfully attacked then you’re in trouble.