a friend of mine had a similar program, and after some research it turned out that he caught a Trojan (from a co-worker), which was embedded in a pdf my friend was sent.

There are trojans that, once opened and activated, can start key-logging and transmitting that information to the originator of the Trojan.