Ann, a user, states that her machine has been behaving erratically over the past week. She has experienced slowness and input lag and found text files that appear to contain pieces of her emails or…

Ransomware encrypts a user's files and demands payment for their release, which does not match the symptoms of data exfiltration and captured communications described.

A rootkit is designed to hide its presence and the presence of other malware, rather than directly creating visible text files containing a user's typed communications.

A backdoor provides covert remote access to a system but does not inherently create local text files containing a user's typed communications as its primary function.

A keylogger is specifically designed to record every keystroke made on a compromised system, directly explaining the presence of text files containing pieces of Ann's emails and online conversations, which are direct outputs of typed information. While a standard virus scan might not detect sophisticated keyloggers, the erratic behavior and input lag are also common symptoms of malware consuming system resources.