This sort of malware spreading often hides itself from (a) logged in users and be (b) browser strgins that aren't Google. This can ultimately hurt your Googlerank if for no other reason than serving a different page to Googlebot than you would to outsiders. And yes, Google checks. This is why they used to have a campaign to register your mobile site with them if you were sniffing for mobile useragents.