If you are finding it in the browser history, then he did it with his browser.

It's technically possible with COM to use your browser to download pictures, but I don't really see it happening.

Post the script here when you get it smile

Gone.