...but all of his computers are compromised with bitcoin-stealing malware...
Even his computer he booted from a live CD? or his computer that has never been connected to the internet since the OS was freshly installed?
If someone could create a module in C that exposed a function which took 32 random bytes and gave me a bitcoin address and base58 private key in a buffer I provide, with no dependency on any libs or 3rd party stuff (100% self contained code), I could PROMPTLY produce a downloadable program for the VeriFone VX credit card machines that would issue addresses as QR codes on receipt paper and on screen. That means all bignumber math and ECC math would have to be implemented right there. Such a C function would not need to be responsible for entropy, I can handle that, I can provide the 32 random bytes to be used for the private key. Open source OK as I plan on publishing source to it all.