Google decides who can run ads with them and who doesn't. They're running malware ads, and those appear above the legitimate search results.