I did virus checks for myself, and i don't see a problem here.Only 3 of 31 AV's report alarm and 2 of those are just "suspicious", not a definite threats...
Think about it, how a clientless bot can connect to game server without your login/pass?
Believe it, or not - it works fine for me, none of my bot accounts are stolen or robbed yet...
To sum it all up, i'm not here to persuade anyone, if you feel like being scammed, don't download and use it.At least it wasn't me who created this program, so maybe you're right about keylogger...Who knows?