He is probably viewing naked pictures of your girlfriend right now (I bet he ran a file recovery program that undeletes/restores files that have been deleted)

He may even have been advanced enough to hide a program that phones home to his FTP/storage server and uploads stuff there from your comp remotely.

Also if he is anywhere near that advanced you more than likely have a keystroke logger hidden in your O.S. too.