Lyrics virus: what it is and how to remove it

Ads by Lyrics are fake notifications displayed by an adware-related program installed on the system. Typically, it can be installed on the system after convincing its victims about "useful" features.

Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.

Automatic

Get a free scan and check if your PC is infected.

Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.

If Lyrics virus keeps coming back after uninstalling, a scan can find what reinstalls it.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.

Do it yourself · free Remove Lyrics virus yourself 5 steps, about 15 minutes, no software needed.

Start the steps
Lyrics virus: ads by lyrics adware pup
Lyrics virus as our 2021 report showed it.

Lyrics virus: summary

NameLyrics virus
CategoryAdware
Sub-categoryPUP
Windows taskYTLUpdater.exe
SymptomsContinuous redirects to sponsored sites, numerous advertisements displayed, altered browsers' settings
Browsers affectedGoogle Chrome, Mozilla Firefox, Internet Explorer, etc.
Removal

Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.
Show 10 more facts
PreventionCheck freeware before installing and do not fall for its promises; Use the Custom/Advanced installation mode to prevent optional components; Do not click on spammy ads
Detection namesNo Microsoft detection name is known
DistributionNot recorded in the old report
DamageNot recorded in the old report
TypeAd-supported program
Evidence5 write-ups by security sites; details still limited
ProgramLyrics virus
First seen2 January 2021
Microsoft Defender nameAdware:Win32/AddLyrics
Facts checked6 October 2026

Is Lyrics virus dangerous?

From our report of Jan 2021 · not reviewed since

Ads by Lyrics - adware-related ads that keep redirecting victims to sites that have been labeled as highly suspicious

Ads by Lyrics are fake notifications displayed by an adware-related program installed on the system.

Typically, it can be installed on the system after convincing its victims about "useful" features. In this case, the virus claims that it can help its user find lyrics of beloved songs. However, this is just a trick used by developers to attract more audience.

In reality, Lyrics virus uses the pay-per-click technique to gain revenue from users who step on its pop-ups. If you keep this dubious application installed, beware that it will keep redirecting you to questionable-looking websites and display irritating advertisements starting slowing down your web browser and causing other issues. Besides, note that it can show up on your computer without your intention.

Adware-type programs usually do not bring anything good for the user. These applications are created only for beneficial reasons. However, once this PUP infiltrates the system, it adds YTLUpdater.exe Windows task which is launched with every system's startup. Additionally, it drops these files on Google Chrome web browser:

IE web browser is altered by entering these components:

If you ever notice commercial content on your computer system, be sure to remove Lyrics ads as soon as possible. Remember, the longer you keep dubious applications on the system, the more annoying their advertising campaigns will get.

Alternatively known as Lyrics ads, these pop-up messages can redirect you to a potentially dangerous website. It is known that such potentially unwanted programs often take users to developer-promoted pages, however, some of which might lack protection and include dangerous content. You can get your computer easily affected by a Trojan horse or other malware .

Another reason to perform Lyrics virus removal is its ability to collect browsing-related data. This information can be misused by criminals who are trying to bing unaware users to their websites. However, according to PUP's privacy policy, the data is mostly used to display tempting ads on victim's browser during the use of the site:

It will help you detect the ad-supported program by presenting it as Adware:Win32/AddLyrics or similar. You can also check our provided manual elimination instructions that you can find below this article.

  • addlyrics128.png
  • addlyrics16.png
  • addlyrics48.png
  • background.html
  • background.js
  • contentscript.js
  • no nomanifest.json
  • etc.
  • AddLyrics.dll
  • r.log
  • YTLUpdater.exe
Lyrics virus: ads by lyrics adware pup
Lyrics virus in our 2021 report.
Lyrics virus: ads by lyrics potentially unwanted program
Lyrics virus in our 2021 report.

From our report of Jan 2021 · not reviewed since

Lyrics adware has numerous versions similar to it

According to cybersecurity experts , potentially unwanted programs such as browser hijackers or our beforementioned ad-supported applications almost always look similar to one another.

Nevertheless, some of them have other newer older versions which have the same operating principle, spreading techniques, symptoms, and features.

Here are some other versions of this adware:

All of these potentially unwanted programs act the same as Lyrics adware. They are known for displaying various advertising posts such as pop-unders, pop-ups, banners , and coupons, which interrupt the user's computing work and make the browsing process more difficult to maintain.

  • add lyrics
  • a2zLyrics;
  • a2zLyrics-1;
  • AZLyrics;
  • LyricShow;
  • LyricsGet;
  • LyricsContainer;
  • LyricsWatch;
  • LyricsArt;
  • Lyrics Bot;
  • LyricsTab;
  • Lyrics Buddy;
  • FoxyLyrics;
  • LyricsViewer
  • etc.

From our report of Jan 2021 · not reviewed since

Potentially unwanted programs come with bundled freeware

You can find some free software sharing sources on the Internet.

All of them are mostly created by third-parties and do not have very high-security requirements. As a result, numerous developers can put unwanted components into the package of the regular software.

After that, while installing such freeware, users secretly get the adware installed also. Good news, you can avoid this type of cruel activity! All you have to do is carefully complete all installing steps and not miss any single one.

Moreover, you should never use the Quick or Recommended installation mode. We suggest picking the Custom/Advanced option. This is way safer and will allow you to track all incoming downloads.

From our report of Jan 2021 · not reviewed since

More from our earlier report on Lyrics virus

  • PUP.Optional.A2ZLyrics.A (Malwarebytes anti-malware) Adware:Win32/AddLyrics (Windows defender antivirus)
  • Install and detect PUPs hiding on the system
  • We use third-party advertising companies to serve ads when you visit our Web site.
  • These companies may use information (not including your name, address, email address or telephone number) about your visits to this and other Web sites in order to provide advertisements on this site and other sites about goods and services that may be of interest to you.

Check your browser and PC

If Windows Security shows Adware:Win32/AddLyrics, it has found Lyrics virus or a file that belongs to it.

Write the name down before you click Remove: it is the most useful search term later, and you will need it if you report the incident.

A family name in the label is more informative than a heuristic one. Our page on why one threat has many antivirus names lists the common formats and what each part means.

How to remove Lyrics virus

Uninstall first, then remove what stays behind, so the ads do not come back after a restart.

  1. Step 1: Uninstall Lyrics virus

    Lyrics virus is removed like any other program, from the list of installed apps. In Windows 11 that is Settings > Apps > Installed apps, in Windows 10 Settings > Apps > Apps & features, and in both you can also use Control Panel > Programs and Features.

    Select Lyrics virus, click Uninstall and follow the uninstaller to the end. Then look at the entries just above and below it when the list is sorted by date: bundled programs install at the same minute.

    Full procedure with screenshots: Uninstall a program or app in Windows On uGetFix

  2. Step 2: Remove it from startup

    Press Ctrl + Shift + Esc to open Task Manager and select Startup apps (Windows 11) or the Startup tab (Windows 10). Disable entries you do not recognise, especially ones with no publisher or with a name that copies a Windows component.

    Right-click an entry and choose Open file location to see where it runs from: programs in %AppData% or %Temp% deserve a closer look. Some entries are not listed there but in the registry Run keys, which the procedure below shows how to check.

    Full procedure with screenshots: Stop apps from opening at startup On uGetFix

  3. Step 3: Delete the folders left behind

    Uninstalling often leaves the program's folders, and some threats reinstall themselves from them.

    Press Windows + R, type %LocalAppData% and press Enter, then do the same for %AppData% and %ProgramData%, and look for folders named after Lyrics virus, its publisher or created on the day the problem started.

    Delete those folders, and check C:\Program Files and C:\Program Files (x86) too.

    If Windows says a file is in use, end it in Task Manager or delete the folder after a restart in Safe Mode. The folders are the same in Windows 11 and Windows 10.

    Full procedure with screenshots: Remove what malware leaves behind in Windows

  4. Step 4: Reset the browser

    A reset removes what the steps above could miss:

    • changed start pages
    • site permissions
    • hidden settings

    In Chrome open Settings > Reset settings > Restore settings to their original defaults; in Edge Settings > Reset settings; in Firefox Help > More troubleshooting information > Refresh Firefox.

    Tip: Bookmarks and saved passwords stay, while extensions are turned off and the search engine and start page return to the defaults.

    Reset every browser on the PC, including Edge, which Windows 11 and Windows 10 always have.

    Chrome Settings page with the Reset settings section open
    Chrome on Windows 11: Settings > Reset settings.

    Full procedure with screenshots: Reset a browser and fix a hijacked search engine

  5. Step 5: Scan the PC, then run the offline scan

    A scan finds the parts of Lyrics virus that the manual steps cannot see. In Windows Security > Virus & threat protection > Scan options, start a Full scan and quarantine what it reports.

    Follow it with Microsoft Defender Antivirus (offline scan) > Scan now, which restarts the PC and checks the disk while Windows and the malware are not running.

    It takes about 15 minutes and works the same in Windows 11 and Windows 10. If either scan finds something, run the full scan again after removal until it comes back clean.

    Windows Security Scan options with Microsoft Defender Antivirus offline scan selected
    Windows 11: Windows Security > Virus & threat protection > Scan options.

    Full procedure with screenshots: Run a Microsoft Defender Offline scan

Instructions for each browser and system

The detailed steps for every browser and system this guide covers. Open the one you use.

Uninstall from Windows

To get rid of Lyrics ads from Windows operating system, you should find all unwanted content related to Lyrics phrase. Use these instructions for help:

Uninstall from Windows 10/8:

  1. Type Control Panel into the Windows search box and open the result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 10/8

Uninstall from Windows 7/XP:

  1. Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP

Remove the unwanted program:

  1. In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
  2. If User Account Control appears, click Yes to confirm, then complete the removal.Uninstall the unwanted program from Windows
Remove from Google Chrome

To uninstall the adware from Chrome, perform these steps to get rid of any related content:

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

Change your homepage:

  1. Click menu and choose Settings.
  2. Look for a suspicious site in the On startup section.
  3. Click on Open a specific or set of pages and click on three dots to find the Remove option.

Reset Google Chrome:

If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings.Reset Chrome 2
Remove from Microsoft Edge

Delete unwanted extensions from MS Edge:

  1. Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
  2. From the list, pick the extension and click on the Gear icon.
  3. Click Remove.Remove extensions from Edge

Clear cookies and other browser data:

  1. Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
  2. Under Clear browsing data, pick Choose what to clear.
  3. Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.Clear Edge browsing data

Restore new tab and homepage settings:

  1. Click the menu icon and choose Settings.
  2. Then find On startup section.
  3. Click Remove next to any suspicious startup page.

Reset MS Edge if the above steps did not work:

  1. Press on Ctrl + Shift + Esc to open Task Manager.
  2. Click on More details arrow at the bottom of the window.
  3. Select Details tab.
  4. Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.Reset MS Edge
Instructions for Chromium-based Edge

Delete extensions from MS Edge (Chromium):

  1. Open Edge and click select Settings > Extensions.
  2. Delete unwanted extensions by clicking Remove.Remove extensions from Chromium Edge

Clear cache and site data:

  1. Click on Menu and go to Settings.
  2. Select Privacy, search and services.
  3. Under Clear browsing data, pick Choose what to clear.
  4. Under Time range, pick All time.
  5. Select Clear now.Clear browser data from Chroum Edge

Reset Chromium-based MS Edge:

  1. Click on Menu and select Settings.
  2. On the left side, pick Reset settings.
  3. Select Restore settings to their default values.
  4. Confirm with Reset.
  5. This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.Reset Chromium Edge
Remove from Mozilla Firefox (FF)

To delete Lyrics adware from Mozilla Firefox web browser, check recently-installed add-ons and delete them. You can also reset your web browser:

Remove dangerous extensions:

  1. Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
  2. Select Add-ons.
  3. In here, select the unwanted extension and click Remove.Remove extensions from Firefox

Reset the homepage:

  1. Click three horizontal lines at the top right corner to open the menu.
  2. Choose Settings.
  3. Under Home, set your preferred homepage and new tab settings.

Clear cookies and site data:

  1. Click Menu and pick Settings.
  2. Go to Privacy & Security section.
  3. Scroll down to locate Cookies and Site Data.
  4. Click on Clear Data...
  5. Select Cookies and Site Data and Temporary cached files and pages, then click Clear.Clear cookies and site data from Firefox

Reset Mozilla Firefox

If clearing the browser as explained above did not help, reset Mozilla Firefox:

  1. Open Mozilla Firefox browser and click the Menu.
  2. Go to Help and then choose Troubleshooting Information.Reset Firefox 1
  3. Under Give Firefox a tune up section, click on Refresh Firefox...
  4. Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.Reset Firefox 2
Delete from Safari

Remove dangerous extensions:

  1. Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
  2. Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.Remove extensions from Safari

Clear history and website data:

  1. Click Safari in the menu and pick Clear History.
  2. Set Clear to all history and confirm with Clear History.Clear history from Safari

Reset Safari:

  1. Click Safari in the menu and select Preferences > Advanced.
  2. Enable Show Develop menu in menu bar.
  3. From the menu bar, click Develop and select Empty Caches.Reset Safari
Reset Internet Explorer

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete...
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset.Reset Internet Explorer

Choose a proper web browser and improve your safety with a VPN tool

Online spying has got momentum in recent years and people are getting more and more interested in how to protect their privacy online.

One of the basic means to add a layer of security - choose the most private and secure web browser. Although web browsers can't grant full privacy protection and security, some of them are much better at sandboxing, HTTPS upgrading, active content blocking, tracking blocking, phishing protection, and similar privacy-oriented features.

However, if you want true anonymity, we suggest you employ a powerful VPN - it can encrypt all the traffic that comes and goes out of your computer, preventing tracking completely.

Lost your files? Use data recovery software

While some files located on any computer are replaceable or useless, others can be extremely valuable.

Family photos, work documents, school projects - these are types of files that we don't want to lose. Unfortunately, there are many ways how unexpected data loss can occur:

  • power cuts
  • Blue Screen of Death errors
  • hardware failures
  • crypto-malware attack
  • even accidental deletion

To ensure that all the files remain intact, you should prepare regular data backups. You can choose cloud-based or physical copies you could restore from later in case of a disaster. If your backups were lost as well or you never bothered to prepare any, can be your only hope to retrieve your invaluable files.

From our report of Jan 2021 · not reviewed since

Delete Ads by Lyrics automatically or manually

If adware has infiltrated your computer system, there is a big chance that you will find unwanted components in your web browsers such as Google Chrome, Mozilla Firefox, Internet Explorer, and others. To remove Lyrics virus and other unneeded content, you should think about downloading and installing a reputable anti-malware tool.

Furthermore, you can perform the Ads by Lyrics removal by using our below-provided instructions. You will need to eliminate all adware-added browser extensions, plug-ins, and add-ons from the infected web browsers.

Questions about Lyrics virus

What is Lyrics virus and why is it on my PC?

Lyrics virus is a program that was installed on the PC, most likely together with something else you downloaded. Free software sites and many installers add extra programs on setup pages with pre-ticked boxes, so the extra install looks like your choice even though nobody read the page.

Check the install date in Settings, Apps, Installed apps: the program you installed that day is the probable carrier. If you do not need Lyrics virus, uninstall it. If it belongs to your hardware or to a program you use, search its exact name and publisher first, because drivers and their tools can have unfamiliar names.

Lyrics virus will not uninstall. What can I do?

First restart the PC and try again, because the program may have been running and locked its own files. If the uninstaller is missing or fails, start Windows in Safe Mode, where most third-party programs do not start, and remove Lyrics virus from Installed apps there.

If it still refuses, delete its startup entry and its scheduled task, restart, and try once more. A program that actively prevents removal is behaving like malware, so finish with a Microsoft Defender offline scan. Avoid third-party uninstallers offered on search ads; several of them are unwanted programs themselves.

Is Lyrics virus a virus?

Not in the strict sense. A virus copies itself into other files; Lyrics virus does not. Security companies classify it as adware or a potentially unwanted program, and Microsoft Defender reports it as Adware:Win32/AddLyrics.

The label "not a virus" does not mean safe, though. Lyrics virus changes what you see in the browser, collects browsing data and sends you to pages that sometimes carry real malware or scams. Treat it as something to remove rather than something to live with, and follow the plan above for each browser you use.

Lyrics virus has no uninstaller. What now?

Some adware does not register itself properly, or its uninstaller only opens a web page. First try Settings > Apps > Installed apps and the older Control Panel > Programs and Features; one may list it when the other does not.

If neither works, disable its entry in Task Manager > Startup apps, restart, and run a Microsoft Defender full scan and offline scan, which remove known adware files. Then, if anything is left, delete the folder it ran from, which you can find by right-clicking the process in Task Manager and choosing Open file location.

Is Microsoft Defender enough to remove Lyrics virus?

For most home PCs it is a solid first step. Defender detects this threat as Adware:Win32/AddLyrics, and a full scan followed by an offline scan covers the places where Lyrics virus usually hides. The offline scan runs before Windows starts, so malware that hides while Windows is running cannot interfere: Run a Microsoft Defender Offline scan.

Defender does not undo everything, though. It does not restore browser settings, decrypt files or change passwords that may have been copied, which is why this guide has separate steps for those. If Defender finds the same item again after removal, something else keeps reinstalling it.

An ad showed a phone number and I called it. What now?

The number belongs to scammers, not to Microsoft or an antivirus company. If you only talked, hang up and do not call back. If you let them connect to the PC, disconnect it from the internet, uninstall the remote access program they used, such as AnyDesk, TeamViewer, ScreenConnect or UltraViewer, and run a full and offline scan.

If you paid or gave bank details, call your bank at once on the number printed on your card. Change any passwords you typed while they were connected, and report the call.

Does adware steal passwords?

Ordinary adware is built to show ads, not to steal logins, and most of it never touches saved passwords. The line is blurry, though. Extensions that can read every page could capture what you type, and adware ads sometimes lead to phishing pages that ask for passwords directly.

If you entered credentials on a page reached through an ad, change that password from a clean device and turn on two-step verification. Otherwise, removing ad-supported program and clearing cookies is usually enough.

Can adware slow down my PC?

Yes. Adware runs in the background, loads ad scripts, opens extra tabs and contacts its servers, all of which use processor time, memory and bandwidth. Ad-heavy extensions also slow down every page, because they inspect and change it before you see it.

The effect is strongest on older PCs and when several adware programs arrived together. After removal, restart the PC and check Task Manager for anything still using a lot of resources that you do not recognise. Speed usually returns to normal once the ads stop.

I clicked on one of the ads. Am I infected?

Probably not. Clicking an ad usually only opens a page, and a page cannot install programs on an up-to-date Windows PC without your help.

You are at risk only if you then downloaded and ran a file, allowed notifications, entered card or login details, or called a phone number shown on the page. Delete any download and run a full and offline scan.

Change passwords you typed, from a clean device. Call your bank if you gave card details. If you called a number or allowed remote access, see the next question.

Will Fortect remove Lyrics virus?

Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.

For Lyrics virus, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.

Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.

Sources

  1. Search Security: Trojan horse (computing) (read October 6, 2026)
  2. Palo Alto Networks: What is malware? (read October 6, 2026)
  3. Google Chrome Help: Use notifications to get alerts (no longer online) (read October 6, 2026)
  4. FTC: How to recognize, remove and avoid malware (read October 6, 2026)
  5. Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)

More removal guides

Remove Scam Likely streamer calls and texts on iPhone and Android: what it means and what to do

"Scam Likely streamer" is what people search after a phone call or text flagged Scam Likely mentions a streamer, a streaming sponsorship or a streaming prize. The label is a carrier warning, not a virus: do not...ADHigh riskUgnius Kiguolis ·

Remove Scam Likely on iPhone and Android: what the call label means and how to stop the calls

Scam Likely is a warning label that your phone carrier puts on an incoming call when it suspects the call is a scam. It is not a virus and not an app on your iPhone or Android phone, so there is nothing to removeADMedium riskUgnius Kiguolis ·

Remove iPhone-fix.com

iPhone-fix.com - an adware virus that changes calendars on iPhone devices by adding hyperlinks to questionable sources iPhone-fix.com is a PUP that installs on iPhone mobile phones and modifiesAdwareMedium riskGabriel E. Hall ·

Remove GSpace Discover

GSpace Discover is the application that can take advantage of the computer processes GSpace Discover adware can control online traffic and randomly show pop-up ads, banners, and cause reroutes toAdwareMedium riskOlivia Morelli ·

Questions and experiences: Lyrics virus

Still seeing it, or found something we did not cover? Ask here: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

5,620 members already hereReading, writing, commenting and voting. 0 verified · 345 joined this year