How long does Magento malware cleanup take?

Most single-site cleanups complete within 1-2 business days. Emergency triage usually starts within 12 hours of your request. A straightforward infection (single skimmer, one backdoor) can be cleaned same-day; a store that’s been compromised for months, has multiple backdoors, or runs across several servers takes longer. Google blacklist delisting then adds 24-72 hours on Google’s side after the store is verified clean.