Not really your templates directory is not 777 so unless you have set that directory to be uploadable then that file could not get there. I would suspect someone has uploaded that file through a security hole in some
vb hack you have installed and they then use that script to upload other files to your site