Again, it completely depends on the circumstances. If you have good backups that were not infected by the criminals, and you follow a careful procedure, you’re likely to recover in days. If you backups were infected, and/or a very large number of computers are involved, you can expect the recovery to take weeks.