Dies war der Fehler nebst all den Event Einträgen 516

Event ID: 516, Warning, Process **\VSTSKMGR.EXE pid (XXXX)

contains signed but untrusted code (issue: third-party application DLL)

How to trust a third-party application

1. Obtain the signature file.
   1. Right-click the third-party DLL file (or any of the third-party application signed files) and select Properties.
   2. Click the Digital Signatures tab.
   3. Select the appropriate digital signature from the Signature list.
   4. Click Details, View Certificate.
   5. Click the Details tab, then click Copy to File.
   6. Complete the Certificate Export Wizard and note where you save the .cer file. McAfee recommends that you accept the default wizard options, with the exception of the file path. 
       
2. Import a copy of the product’s digital certificate into the McAfee Trust certificate store.
   1. Contact McAfee Support. See the Related Information section for the contact details.
   2. Provide the .cer file you want to add.
      McAfee Support will provide an executable package to add the certificate to the McAfee Trust certificate store.
   3. Run the executable provided by McAfee Support. (Steps to do so via ePolicy Orchestrator will be provided by McAfee Support.)
   4. Click Tools, General Options, Global Scan Settings and deselect Enable saving scan data across reboots, then click Apply, OK.
   5. Restart your computer. This is necessary for the certificate store changes to take effect.
   6. Click Tools, General Options, Global Scan Settings and select Enable saving scan data across reboots, then click Apply, OK.

After these steps the Event 516 will no longer occur for the newly trusted third-party application.

NOTES: For more advanced users, there are other methods to update the certificate store:

• The Microsoft MMC snap-in. See http://technet.microsoft.com/en-us/library/cc770355.aspx.
• The Microsoft CERTMGR.exe tool. See http://msdn.microsoft.com/en-us/library/windows/desktop/aa376553.

  (The executable provided by McAfee Support makes use of the CERTMGR.EXE tool.)   

Wie kann man den Certificate Export fuer Mcafee machen:

Rechts Klick auf die besagte DLL:

Diese sind z.B. die Files welche durch das “In Datei kopieren” generiert werden. Ein Case bei Mcafee eröffnen und diese dann Mcafee senden. Bezug auf KB74176 (https://kc.mcafee.com/corporate/index?page=content&id=KB74176) nehmen im Ticket.

c:\progra~2\netinst\NiAMH.DLL (32BIT)
c:\progra~2\Citrix\ICACLI?1\RSHOOK.DLL (32BIT)
c:\program files\Immidio\Flex Profiles\Flexhook32.dll (32bit)
c:\progra~2\netinst\NiA64.DLL (64BIT)
c:\program files\Immidio\Flex Profiles\Flexhook64.dll (32bit)

Folgende Files sind neu “Trusted” und durch Mcafee für uns signiert worden

3rdParty1.cer (Hersteller 1)
3rdParty2.cer (Hersteller 2)
3rdParty3.cer (Hersteller 3)
Certmgr.exe (Mcafee’s Certificate Manager)

Das ganze ist in einem selbstausführenden Executable Paket verpackt. Er entpackt die Sachen temporär ins C:\Program Files (x86)\McAfee\VirusScan Enterprise und integriert der Certificates dann mit certmgr.exe FILENAME.CER.

Files welche im SUPERDAT sind welches man von Mcafee erhält