nvidia shield stream cause Sandboxie start many rundll32.exe about nvstreamsrv\rxdiag.dll

[rufengsuixing]

Describe the bug
i am using nvidia shield stream to my phone with moonlight.
when i start an application in sandbox,there are lots of rundll32.exe running in the box,if i end the app process,these rundll32 do not end ,just opening and ending,i need to choose stop all app in box to stop.
if i do not use shield stream,there is no such problem
To Reproduce
use nvidia shield stream: https://www.nvidia.com/en-us/geforce/geforce-experience
just start any app in box

Screenshots

Expected behavior

System details and installed software

• What is your Windows edition and version? Windows 10 21H1 19043.1348
• What is your current Sandboxie edition and version? Sandboxie Plus 0.9.8d
• Please mention in which version this bug got introduced, because it acts as a guide for testers and developers.
• Please mention any security software running in the background, even if the real-time protection is disabled. https://www.huorong.cn

If you have a compatibility issue

• Please add a reference link to the program not working properly in Sandboxie. all
• Please consider to take a log and make it available for analysis:
• 1.log
  Additional context

Sandboxie configuration
Sandboxie.txt

[syncjack]

Confirmed this also happens with Sandboxie Classic x64-v5.53.3.exe

[RadarNyan]

I can reproduce this bug with Sandboxie Classic x64 v5.55.2 / Geforce Experience v3.20.0.123 / Nvidia Driver 426.00

Run any program in any sandbox will result in this behavior, no need to be actually streaming, just having the service running would cause it.

As a workaround, just block access to the dll in Global Settings for now:

[GlobalSettings]
...(other settings)...
ClosedFilePath=C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\rxdiag.dll
ClosedFilePath=C:\Program Files\NVIDIA Corporation\NvStreamSrv\rxdiag.dll

GAMESTREAM will still work (and you can control sandboxied apps with it no problem)

[isaak654]

Are you able to reproduce the same issue if you update Geforce Experience to v3.21 or later?

[rufengsuixing]

have the same issue on Geforce Experience v3.24.0.123 driver 497.09 Gtx970M

[isaak654]

If the workaround provided above works for you too without breaking anything, I personally don't see any issue to include it in the next build.

[predprey2]

I can reproduce this bug with Sandboxie Classic x64 v5.55.2 / Geforce Experience v3.20.0.123 / Nvidia Driver 426.00

Run any program in any sandbox will result in this behavior, no need to be actually streaming, just having the service running would cause it.

As a workaround, just block access to the dll in Global Settings for now:

[GlobalSettings]
...(other settings)...
ClosedFilePath=C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\rxdiag.dll
ClosedFilePath=C:\Program Files\NVIDIA Corporation\NvStreamSrv\rxdiag.dll

GAMESTREAM will still work (and you can control sandboxied apps with it no problem)

Can confirm workaround works on GeForce Experience v3.24.0.126, GTX 1080 Ti, driver 472.84, Sandboxie-Plus v1.0.3.

Would be good to know what rxdiag.dll is for and the root cause for it triggering repeatedly in sandbox though.

[Gunni]

This might be unrelated to Sandboxie, but i wanted to point this out because this is a bigger bug than just with Sandboxie. I have not seen anyone else report this as a problem.

I am have this happen on my normal windows 10 and after upgrading to windows 11 it also happens.

rundll32.exe "c:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll" RxDiagSetRuntimeMessagePump

I end up with about 4k processes running before my system starts to lag and I remember i had to do something.

I even tried a DDU and everything, it starts happening right away unless i rename the dll, which is a fight of taskkill /f /im rundll32.exe and rename because if even one is running i can't rename it, and they start quickly...

I ended up with this in admin powershell...

taskkill /f /im rundll32.exe && Rename-Item "C:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll" "c:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll.disabled"

Note that I am unable to even open geforce experience, it fails with

It hasn't worked for me for at least a year, if not more.

[NiroEnvy]

This might be unrelated to Sandboxie, but i wanted to point this out because this is a bigger bug than just with Sandboxie. I have not seen anyone else report this as a problem.

I am have this happen on my normal windows 10 and after upgrading to windows 11 it also happens.

rundll32.exe "c:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll" RxDiagSetRuntimeMessagePump

I end up with about 4k processes running before my system starts to lag and I remember i had to do something.

I even tried a DDU and everything, it starts happening right away unless i rename the dll, which is a fight of taskkill /f /im rundll32.exe and rename because if even one is running i can't rename it, and they start quickly...

I ended up with this in admin powershell...

taskkill /f /im rundll32.exe && Rename-Item "C:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll" "c:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll.disabled"

Note that I am unable to even open geforce experience, it fails with

It hasn't worked for me for at least a year, if not more.

Hi
About ur problem just reinstall geforce. Atleast it helps for me
And thanks for solution with renaming and console command, i had 2.5k processes and "access denied" for task manager

[Gunni]

Reinstall had no change for me (i have tried that, and a DDU too!), i submitted nvidia support ticket 240106-000213 if you care. I'll see if they'll have any help, don't have high hopes.

[Eboubaker]

Please fix @sandboxie-plus

[Ougenny]

rename nxdiag.dll → nxdiag.dll.bak

在终端输入：
TASKKILL /F /IM rundll32.exe /T

It works for me so far.

[Eboubaker]

rename nxdiag.dll → nxdiag.dll.bak
在终端输入： TASKKILL /F /IM rundll32.exe /T
It works for me so far.

Yes but you need to do it Fast