read the news. your zero-day is already out. of course it doesn't really work if no one uses the machine. you could try emailing it to the box if it has email. I remember the f-secure blog said it infected a DOS box after just downloading it. Play around with the WMF. what do you really have to lose at this point. hell, just load up a linux livecd and give him the actual one. thumb your nose at him with the spyware. lol.

*edit*

you said your on a LAN, so can you knock him off by messing with the switches or routers? it's technically a win.