It's just as possible he checked against the MD5s supplied in the torrent he got the ISO from, or never did the check, if he hadn't thought of it.

It's much less likely that he's experiencing the most advanced malware in the world, and much more likely that he just overlooked something simple.