A California man is facing a maximum of 60 years in prison and a $1.75 million fine after agreeing to plead guilty to using botnets to steal PC users' personal and financial information.