More on that Google-phish-and-worm saga, with some tips on what to do now, and how to avoid this sort of thing in the future.