A loophole in Google's website is sending unsuspecting users to malicious websites or executables, according to McAfee Avert Labs.