I would immediately change all login credentials, but on another machine, or only after you are certain you have removed it. If he did in fact put that key logger on your machine, and you've logged...