I know this post is a bit late, but for those of you who haven’t yet done so, you might want to update your version of Google Desktop to the latest version. Why? Well, there is a XSS (Cross Site Scripting) security vulnerability in Google Desktop where it potentially allows remote injection of Java Script by using the "under:" search filter parameter.
Anyway, you can download the latest version of Google Desktop (5.0.0701.30540 – at time of posting) from the URI below
For more information on the XSS vulnerability, take a look at the PDF / Flash demo below: