Scripts strange behaviour

[Blisk]

I don't know what happend with these scripts.
On one computer it works ok on another I get this temporarry files on C:disk which are in real scripts with some hash name.
Some show on and some doesn't.
what can cause this on some computers and on others not and all are on the same settings.

[Salmon Trout]

What does 'these scripts' mean?

[Blisk]

batch, which is runned by task scheduler

[Salmon Trout]

1. Think what you were doing at 18.45 on 11th March.
2. Open one of the .bat files in Notepad and inspect the contents.
3. Consider if you have a virus.

Please answer ALL of these questions.

[Blisk]

1. Think what you were doing at 18.45 on 11th March.
2. Open one of the .bat files in Notepad and inspect the contents.
3. Consider if you have a virus.

at that time script is runned by task scheduler.
I have alredy checked viruses but there is none of it

[Salmon Trout]

Did you do the Notepad thing?

[Blisk]

Did you do the Notepad thing?

yes, two times.
funny thing is on win 10 that is not happening but on win 7 on some PCs.

[Salmon Trout]

What did you see in Notepad??

[patio]

+ + + 1...

[Salmon Trout]

+ + + 1...

[patio]

He needs to help us help him.....with more info.
Hopefully that'll happen...maybe not.

[Salmon Trout]

Surprise batch file in root of C:\ ... first thing to do: find out what it does.

[Blisk]

Surprise batch file in root of C:\ ... first thing to do: find out what it does.

Yes I checked that.
It is not one batch but all of them.
batch like copy files, check archive, check installed software, etc.
all of them on some windows 7 PC write directly on C: when batch is started than when batch finish it is gone, but not for all.
this is one of it

Code: [Select]

for /f "delims=" %%d in ('dir /s /b /ad %1 ^| sort /r') do rd "%%d" 2>nul

[Salmon Trout]

I still don't understand. Can you make a bigger effort with your English? Are you saying you made these scripts yourself?

[Blisk]

I still don't understand. Can you make a bigger effort with your English? Are you saying you made these scripts yourself?

yes or copy it from internet, I basically know what they do and it was tested.
problem is I latelly notice they write somekind of temporarry files on C:
question is why? probably some settings in windows?
it is strange for me as it is for you, because basically all should start in c:\windows\system32