I keep getting hacked and this is the file they are leaving
picao/picao0.php
From what we can tell, it's increasing the php limits to run some form of script. I deleted it to get my account reactivated, but it keeps coming back.
I did a search for this file, and several cubecart accounts seem to be hacked