Compromised system

I scanned my website using Wordfence and it caught a file named .cache.php located in wp-content/themes/*/.cache.php and had the following code within it:

[ Malware redacted ]

Everytime I delete it, it reappears. I really do not want to reinstall my copy of WP as there has to be a solution to this.