Given that Windows 7 _Ultimate_ was installed on what is essentially an OEM machine, it's very likely that it's a pirated copy with a "home brewed" license key.
I think the most reasonable explanation is that either the OS was sourced already infected, or the crack tool they used was infected.
I think the most reasonable explanation is that either the OS was sourced already infected, or the crack tool they used was infected.