This (Test.7z) is a nasty PoC, maybe you know it already from the Comodo forum.
I think no HIPS was actually able to stop it keylogging until it has been reported to the vendors.
Well, and then there are of course the usual suspects: AKLT and Spyshelter.
Zemana is the same as AKLT "GetRawInputData", I guess, so I won't attach it.
You do not have the required permissions to view the files attached to this post.