Yes, but it varies, because we have automatic malware detection, automatic hacked site detection, and manual hacked site detection.

For example, if we manually detect that a subdirectory of a site is hacked, we may remove only that subdirectory from our search results. If your entire site is hacked, then your entire site may be demoted or removed until the site is clean.