Corner Sunshine “Virus” Removal

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

This page aims to help you remove “Corner Sunshine”. These “Corner Sunshine” removal instructions work for Chrome, Firefox and Internet Explorer, as well as every version of Windows.

Many users have recently contacted us with a request to help them remove the intrusive ads, pop-ups and banners generated by “Corner Sunshine”. This is a PUP (Potentially Unwanted Program), which gets installed on their PC unnoticed and quickly integrates with any browser – Chrome, Firefox, IE, Opera, etc. As a result, the user’s screen gets flooded with different advertisements, which may at some point interfere with the normal browsing activity and cause disturbances and irritation to some people. If you are reading this, then you are probably experiencing these effects. That’s why, on this page, we are going to show you how to remove “Corner Sunshine” and all its traces from your system. Just read the information below so you can effectively clean your system from the current ads invasion and avoid any such potentially unwanted programs in the future.

Let’s begin with what a PUP is and how it operates?

Many online users are exposed to different ads, pop-ups, banners, blinking boxes and promotional messages that can be found on the web. With the increased role and activity of the online advertising industry, the methods these ads use to get displayed directly on users’ screens are also evolving. You are more likely to see ads, which are directly displayed on some ad sponsored websites, social platforms or different sales pages. However, there is another way that pop-ups could get on your screen and this usually happens through special software that gets installed on your computer. This software is called PUP and “Corner Sunshine” is a typical representative of it, primarily developed to install an ad-generating component deep inside your system and bombard you with a huge number of ads every time you open your browser.

What is all this ad-generating for?

Usually, you will quickly notice that you have been invaded by PUP mainly because of the abnormal amount of unstoppable and very aggressive advertisements you are seeing on your screen. But why are they so many? The main reason for the excessive amount of ads that this type of software generates is money. The banners, popping boxes and blinking links are usually sponsored or paid advertisements and every time you click on some of them, the people, who own the PUP, generate some profits through a method called Pay-Per-Click. This means that they are motivated to display as many ads as possible and try to get as many clicks as possible. However, in their attempts to gain more paid clicks, the PUP owners may really overdo it with the amount of sponsored messages they flood the users with. As a result, the users may experience some constant browsing interruptions, which may make them decide to uninstall the PUP.

Is Corner Sunshine “Virus” really a threat to your PC?

Now, this is something that probably concerns you the most. But we have some good news for you – “Corner Sunshine” is not a virus. Despite its rather aggressive ad-generating behavior, “Corner Sunshine” and PUP programs in general are not considered malicious and don’t represent any security threat to your machine. In fact, they are legitimate pieces of software, which are only used as ad-displaying tools involved in the popular Pay-Per-Click remuneration scheme. They cannot harm your system the way a virus or malware like the infamous Ransomware would. An actual harmful threat would corrupt your system, steal credentials, spy on you, infect other machines and whatnot. Ransomware could even lock your entire data and blackmail you. PUP cannot do anything this harmful, that’s why you don’t need to get panicked if you detect such an application on your machine. At its worst, it could only cause you some browsing interruption and irritation. Sometimes, it may try to match its ads with your latest searches and track your browsing history or online activity with the idea to show you more relevant ads. However, this activity has not proven to be very useful, moreover, some users may not really like it when their online activity is monitored and analyzed by third parties. This could be another reason to consider uninstalling “Corner Sunshine”, but let’s first tell you how exactly you got it on your system in the first place.

How can PUP get installed on your PC?

It is very unlikely that you would install PUP like “Corner Sunshine” voluntarily on your computer just because you like being bombarded with advertisements. However, knowingly or not, you give your permission to such software to be installed on your system and this happens usually when you run the standard/quick setup of another program, which may be bundled with PUP. Now, software bundling is a method used by many software developers, who pack some attractive programs with PUP and distribute the whole bundle for free. Freeware platforms, file sharing sites, installation managers, direct downloads and installers or even spam emails may contain such bundles. So, if you usually download and install software from such places, you are advised to always click on the advanced/custom/manual option during the setup, because this is where you will find the PUP and prevent it from getting installed along the program you want. This is an option that many people overlook, and this is how they end up with a bunch of undesired programs, or sometimes even malware or a virus. That’s why it is essential that you always opt for the most detailed installation option. Now, since you have probably skipped this important step the last time, you may need the instructions in the removal guide below if you wish to save yourself from the ads. Simply follow the guidelines and you will be PUP-free in just a few clicks.


Name “Corner Sunshine”
Type  PUP
Danger Level Low
Symptoms Dozens of ads, pop-ups and banners cover your screen.
Distribution Method This program could be found bundled in software installers, download managers, spam emails, torrents, freeware platforms or direct downloads.
Detection Tool

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version.
More information about SpyHunter and steps to uninstall.


Corner Sunshine “Virus” Removal



Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).


To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Reveal All Hidden Files and Folders.

  • Do not skip this  – “Corner Sunshine” may have hidden some of its files.

Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.


Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.



Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).


Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512  Remove “Corner Sunshine” from Internet Explorer:

Open IE, click  IE GEAR —–> Manage Add-ons.

pic 3

Find the threat —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove “Corner Sunshine” from Firefox:

Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

pic 6

Find the PUP/malware —> Remove.
chrome-logo-transparent-backgroundRemove “Corner Sunshine” from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.

  • At this point the threat is gone from Chrome, but complete the entire guide or it may reappear on a system reboot.


Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are dangerous. Google them or ask us in the comments.


This is the most important and difficult part. If you delete the wrong file, it may damage your system irreversibly. If you can not do this,
>> Download SpyHunter - a professional parasite scanner and remover.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Right click on each of the problematic processes separately and select Open File LocationEnd the process after you open the folder, then delete the directories you were sent to.



Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!