You might be able to create a BartPE Windows installation including a
slipstreamed antivirus program, which you could then use to boot each PC in
turn and run a virus scan to clear out the nasties. Someone must've already
put one together...
That would also obviate the need for admin credentials, because as far as
I'm aware you'd need admin privs to read files outside of your scope of
security for the logged on user :)
Any other ideas?