The SPS AKL (SharePoint Portal Server Anti-Key Logger) is an application meant to facilitate keylogger detection routines by leveraging windows services, along with removal, and recommeneded preventions options through multiple modules.
Check Process Service Module - Runs against the current services located on the machine to detect whether a keylogger is present on the target machine
Detected Keylog Attempt Module and Actions Management - A managment interface for if and when a keylogger is detected on one of your SharePoint machines. It will provide you insight into the keylogger, and options available to work with the malware.