What he ment to say is that on average it takes 20 minutes, and that is true. It depend ofcourse on several things. Like is there just a new fast spreading malware out there? How many people are online? How many of them have their security setup correct? etc etc.