backfolder on "soaksoak.ru Malware"

Hi all.
Maybe adding a "rewrite rule" to your .htaccess could help. I´ve had a problem with a spam shell script two days ago (it was hosted in the Uploads folder), and adding next rule seems to be effective:
RewriteRule ^xmlrpc\.php$ "http\:\/\/0\.0\.0\.0\/" [R=301,L]
So adding a rule according to your needs could help until WP is updated.