The phpinfo.php files are not part of Perch. This is a file that can be uploaded to the server to get information about the PHP install. The file should not be left on the server. Is this a file that the security team have uploaded?
For hiding PHP version in response headers, I would discuss with web hosting company because it's a server configuration isn't it?