Then, why choose that particular folder? It isn't showing up in every folder path. Even if he says it wasn't deliberate, is it possible to get there, and only there, without it being on purpose?
Seems like a really easy PR tactic to me.
Download the virus, stick it in your .ipa, have Apple approve it, then "discover it" and submit it to the news.
It was only approved 5 days ago. Seems awfully quick for someone who just happens to be running that antivirus program (I've never heard of it, personally,) to just happen to download the equally so if not more obscure iOS app.