Certificado.exe is a Trojan.Banker-ADR. Certificado.exe monitors user Internet activity and bank information. It sends stolen data to a hacker site. Related files: %System%\Certificado.exe %System%\svchosts.exe More info: http://www.sophos.com/virusinfo/analyses... Removal: Kill Certificado.exe process and remove Certificado.exe from Windows startup using antivirus (also check How To Remove section)Startup Optimizer.