spamming from the file post.php under wp-admin directory

Hello,

My site is using generating spamming and the most of the spamming is happening from the file post.php file. while checking we could see that the file is under the wp-admin directory. We tried delete that specific file , unfortunately it creates again and used as spam. How can i stop this.