And you need to download a keylogger for it to work and there is no other way. Thats why a good firewall is good cause the keylogger is useless if it cant report the keys to its server
No, you don't need to download a keylogger. There are various exploits that allow people to trojan you remotely if they have your IP; from there on they can download to your box and execute whatever they want.