Well, the first thing
I'd do is revoke his (I am making an assumption here that the cowboy was is a
boy) Root access on every machine in the company. Then I go to his manager and explain why I took these steps. If the manager has a difficulty with the idea, I move up to the next manager in the food chain. If I don't get support at some level, and they make me put the Jerk back, I smile most politely, acquiese, and immediately start circulating my resume. If I do get support, then the Jerk stays in User-privilege, and we re-build Perl on every machine he had Root access to. And if I am feeling really churchy, we charge the time back to the Jerk's project, as "virus remediation".
----
I Go Back to Sleep, Now.
OGB