This is the transaction he talks about: http://block-explorer.com/address/Lfw8yzqxo3Ed2Y83NSCeDbfEJdER6WUNQJ

He should ask for help at litecoin technical forum. Maybe he made a transaction using a wallet / client that sweaps addresses automatically or something.