nope not always, if there is an .dll file with it, scan that one to, just scan everything, because sometime's, when you open .exe, it replace and rename the .dll file somewhere in your system32 folder..
And i think if this was a keylogger, it should dissapeared when you clicked on it