Keyloggers use system-wide hooks, I don't know how exactly you find all the hooks implemented on a system but I'm sure there is a way to do it.