DavidR
5
If wp_admin relates to wordpress then ensure that you have the latest version of wordpress and replace and suspect/infected file.
There has been a lot (thousands) of wordpress sites hacked recently due to a vulnerability in old versions of WP. Though this has usually presented itself in infected .js files.