'...plus possible restitution in the millions of dollars.' What does this mean exactly?
I think every time a virus writer is caught it does act as a deterrent, it shows that if you write malicious software you can be found. This will put people off, even 'clever' teenagers.
The punishment sounds about right to me, but I'm sure many would disagree.