Almost everything using the logging technique these days is event-driven: it's actually a form grabber, and so looks for submit events. It then has the correct string no matter how you assembled it. Your method would only defeat hardware-based keyloggers in the keyboard cable.
Some commercial antivirus providers have free bot scanners, for example Trend's RUBotted. But I'm not sure that would detect, say, Spector.
Last edited by Bushfiva; 29th April 2015 at 08:36.