Sounds like this is a combination of hardware and software keylogger.

FYI, we learned from webinar that GuardedID doesn't protect against hardware keylogger, only software keylogger.