Welcome to the Q&A Forum

Depending on the pagerank of your site, it should take at most a couple weeks to a couple months before Google re-crawls the entire site and notices that the malware is gone.  If it's been longer than that, then likely something else is the cause. Rankings and traffic fluctuate all the time, so first of all don't panic. If you think about it, there are only 3 things that can affect your site's rankings: the content on your site, the links to your page, and google's changing algorithm.  So ask yourself, has anything on your site changed?  Have you lost any links lately, or have your competitors gained more links?  Has there been an algorithm change that affected your site? If it's an onsite issue, then fix the issue and focus on building more good content.  If the issue is links or an algo change, focus on building more links.