The self-inflicted keylogger was helpfully uploading screenshots and keystroke logs to an open directory on a web server. D'OH!