Comodo points to; c:\users\gordon\appdata\locals\temp\Xq0.exe
If these files don't show up in explorer there are 2 possibilities
1) the files are hidden, either for explorer or by a rootkit.
2) the files where present but are no longer there, only some shortcut, or Scheduled Task still tries to execute them.
Can you please verify if there are Scheduled Tasks that try to start these files, if so then Sandbox will still alert you that these run sandboxed, even though the files no longer exist.