Hiya,
Just dropping by, I think I had the same virus/trojan/whatever as the OP.
I can't now recall what the malicious files were named, but they seemed like random generated e.g. gfdilfgd.exe (not the actual name, but used for demonstration).
I tried and ran several anti-virus and malware removal softwares, but none of them detected what was causing the problem. I couldn't get Microsoft Standalone System Sweeper to install on my USB Stick, so I didn't use it.
But I think I got it solved and the files removed in the following way:
I examined the filepath that was causing the Command Process notification to display (it shows the filepath in the notification and you can force the notification to stay in the background by pressing ESC in the notification screen and quickly opening for example Windows Explorer). I also used Autoruns (
Autoruns for Windows) to find out what program was ran in logon to cause the malicious software to run, similarly there were entries such as gfdilfgd.exe.
Comparing information from these I found out that they were pointing at C:\Users\(Your Username)\AppData\ , which is a hidden folder and you have to enable seeing hidden files in Folder Options in the Control Panel. Specifially the malicious files were in the folders Local, Roaming and \Roaming\Temp. The files had random generated, but rather short names such as "sadfispodcixg" or "gsdgsodpgsd.exe" so they were easy to spot. I also checked the file creation times to find out that the suspicious files were created closely on the same time, which helped to spot the malicious files in different folders. There were different types of files, some folders, .exes in the folders and .txt documents or logs that seemed to be generated by the malicious software, because more of them were appearing on time intervals.
To remove the files by hand, I booted Windows into Safe Mode. I started by running Autoruns and removing the malicious entries (there were 2 of them) from the logon tab so they wouldn't run on startup. Then I went on removing all suspicious files from the previously mentioned folders and double checking that I didn't leave anything that could be part of the malicious program.
Booted back into Windows 7 and the notification isn't appearing anymore and I can't see any traces of the malicious software.
