Yes. You have malware, possibly from a stolen theme or outdated plugin.
https://medium.com/@cirku17/wp-vcd-malware-analysis-7c5dbaad89c3
https://medium.com/@rakshitshah/wordpress-wp-vcd-malware-attack-e7394801895d
Steps may need to be repeated. I had this in the past. IMPORTANT: This impacts ALL themes you have installed (all the functions.php, etc).
