nvidia shield stream cause Sandboxie start many rundll32.exe about nvstreamsrv\rxdiag.dll

rufengsuixing commented 2 years ago

Describe the bug i am using nvidia shield stream to my phone with moonlight. when i start an application in sandbox,there are lots of rundll32.exe running in the box,if i end the app process,these rundll32 do not end ,just opening and ending,i need to choose stop all app in box to stop. if i do not use shield stream,there is no such problem To Reproduce use nvidia shield stream: https://www.nvidia.com/en-us/geforce/geforce-experience just start any app in box

Screenshots

Expected behavior

System details and installed software

What is your Windows edition and version? Windows 10 21H1 19043.1348
What is your current Sandboxie edition and version? Sandboxie Plus 0.9.8d
Please mention in which version this bug got introduced, because it acts as a guide for testers and developers.
Please mention any security software running in the background, even if the real-time protection is disabled. https://www.huorong.cn

If you have a compatibility issue

Please add a reference link to the program not working properly in Sandboxie. all
Please consider to take a log and make it available for analysis:
1.log Additional context

Sandboxie configuration Sandboxie.txt

syncjack commented 2 years ago

Confirmed this also happens with Sandboxie Classic x64-v5.53.3.exe

RadarNyan commented 2 years ago

I can reproduce this bug with Sandboxie Classic x64 v5.55.2 / Geforce Experience v3.20.0.123 / Nvidia Driver 426.00

Run any program in any sandbox will result in this behavior, no need to be actually streaming, just having the service running would cause it.

As a workaround, just block access to the dll in Global Settings for now:

[GlobalSettings]
...(other settings)...
ClosedFilePath=C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\rxdiag.dll
ClosedFilePath=C:\Program Files\NVIDIA Corporation\NvStreamSrv\rxdiag.dll

GAMESTREAM will still work (and you can control sandboxied apps with it no problem)

isaak654 commented 2 years ago

Are you able to reproduce the same issue if you update Geforce Experience to v3.21 or later?

rufengsuixing commented 2 years ago

have the same issue on Geforce Experience v3.24.0.123 driver 497.09 Gtx970M

isaak654 commented 2 years ago

If the workaround provided above works for you too without breaking anything, I personally don't see any issue to include it in the next build.

predprey2 commented 2 years ago

I can reproduce this bug with Sandboxie Classic x64 v5.55.2 / Geforce Experience v3.20.0.123 / Nvidia Driver 426.00

Run any program in any sandbox will result in this behavior, no need to be actually streaming, just having the service running would cause it.

As a workaround, just block access to the dll in Global Settings for now:
[GlobalSettings]
...(other settings)...
ClosedFilePath=C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\rxdiag.dll
ClosedFilePath=C:\Program Files\NVIDIA Corporation\NvStreamSrv\rxdiag.dll
GAMESTREAM will still work (and you can control sandboxied apps with it no problem)

Can confirm workaround works on GeForce Experience v3.24.0.126, GTX 1080 Ti, driver 472.84, Sandboxie-Plus v1.0.3.

Would be good to know what rxdiag.dll is for and the root cause for it triggering repeatedly in sandbox though.

Gunni commented 10 months ago

This might be unrelated to Sandboxie, but i wanted to point this out because this is a bigger bug than just with Sandboxie. I have not seen anyone else report this as a problem.

I am have this happen on my normal windows 10 and after upgrading to windows 11 it also happens.

rundll32.exe "c:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll" RxDiagSetRuntimeMessagePump

I end up with about 4k processes running before my system starts to lag and I remember i had to do something.

I even tried a DDU and everything, it starts happening right away unless i rename the dll, which is a fight of taskkill /f /im rundll32.exe and rename because if even one is running i can't rename it, and they start quickly...

I ended up with this in admin powershell...

taskkill /f /im rundll32.exe && Rename-Item "C:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll" "c:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll.disabled"

Note that I am unable to even open geforce experience, it fails with

It hasn't worked for me for at least a year, if not more.

NiroEnvy commented 9 months ago

This might be unrelated to Sandboxie, but i wanted to point this out because this is a bigger bug than just with Sandboxie. I have not seen anyone else report this as a problem.

I am have this happen on my normal windows 10 and after upgrading to windows 11 it also happens.

rundll32.exe "c:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll" RxDiagSetRuntimeMessagePump

I end up with about 4k processes running before my system starts to lag and I remember i had to do something.

I even tried a DDU and everything, it starts happening right away unless i rename the dll, which is a fight of taskkill /f /im rundll32.exe and rename because if even one is running i can't rename it, and they start quickly...

I ended up with this in admin powershell...

taskkill /f /im rundll32.exe && Rename-Item "C:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll" "c:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll.disabled"

Note that I am unable to even open geforce experience, it fails with

It hasn't worked for me for at least a year, if not more.

Hi About ur problem just reinstall geforce. Atleast it helps for me And thanks for solution with renaming and console command, i had 2.5k processes and "access denied" for task manager

Gunni commented 9 months ago

Reinstall had no change for me (i have tried that, and a DDU too!), i submitted nvidia support ticket 240106-000213 if you care. I'll see if they'll have any help, don't have high hopes.

Eboubaker commented 7 months ago

Please fix @sandboxie-plus

Ougenny commented 4 months ago

rename nxdiag.dll → nxdiag.dll.bak

在终端输入： TASKKILL /F /IM rundll32.exe /T

It works for me so far.

Eboubaker commented 4 months ago

rename nxdiag.dll → nxdiag.dll.bak 在终端输入： TASKKILL /F /IM rundll32.exe /T It works for me so far.

Yes but you need to do it Fast

SERBice commented 3 months ago

Same problem, I had to rename the DLL, but the nVidia Experience is unusable.

I was running out of RAM, hundreds, maybe thousands of rundll32 processes running the nefarious rxdiag.dll dll, I don't know where the recursion comes from. I have everything updated to date.

I doubt it's a Sandboxie problem, in fact I don't know what Sandboxie is, I got here looking for people with the same problem. I guess it's an nvidia error. Honestly I don't know, I haven't investigated further.

FiruzzZ commented 1 month ago

I also found today that my pc was running nearly 100 of these processes, so I renamed rxdiag.dll so it can't be found, probably will be regenerated when Nvidia is updated, but so far so good And GeForce Experience stopped from working, but who cares, does nothing useful anyway

StevenPolley commented 1 month ago

Happened to me just now as well. Took awhile to identify what was going on and was tempted to just reboot but came across 4000+ processes, was able to stop them

Get-Process -Name rundll32 | Stop-Process -Force

And then I renamed the .dll file

I don't use sandboxie by the way, to so this is likely not a sandboxie issue but an issue with Jensen Huang

mMONTAGEe commented 6 days ago

same stuff happened, all the same, had to run Get-Process -Name rundll32 | Stop-Process -Force to stop the 3428 (according to process hacker) processes. Cant use GeForce Experience either, program wont start with error 0x003

sandboxie-plus / Sandboxie

nvidia shield stream cause Sandboxie start many rundll32.exe about nvstreamsrv\rxdiag.dll #1425