Microsoft said it suspects a former Russian antivirus company employee is behind an illegal botnet operation.