Authored by: Anuradha Prabudh
PDF changing software program may be tremendous useful. Whether or not you’re turning a Phrase doc right into a PDF or merging information into one neat bundle, these instruments save time and make life simpler.
However right here’s one thing many individuals don’t notice — a few of these free PDF instruments include hidden baggage. Once you set up them, they could additionally sneak in a brand new search engine, browser extension, or change your homepage with out clearly asking for permission. 
What’s Going On?
Some PDF software program is bundled with further applications. Meaning while you obtain and set up the PDF converter, it could additionally set up:
- A brand new search engine in your browser
- Toolbars or browser extensions
- Apps that run within the background in your pc
More often than not, these aren’t viruses, however they will decelerate your pc, change your shopping expertise, and even acquire your information.
Geographical Buyer Prevalence
The warmth map under illustrates the prevalence of EPI PDF software program within the area in Q2, 2025.
We see that the highest nation encountering this software program is america of America with over 118,000 McAfee gadget encounters.
Why Do They Do This?
Many free software program firms become profitable by together with these extras. Different firms pay them to advertise their search instruments or browser extensions. It’s a method for them to earn one thing in return for providing the software program at no cost.
Throughout our day by day hunt at McAfee to safe our buyer, we got here throughout one such bundler software referred to as EPI PDF Editor that clearly had misleading nature in the direction of the top consumer.
Key Takeaways:
- Learn Earlier than You Click on “Subsequent”
At all times take a second throughout set up to learn what every display says. Search for checkboxes that allow you to “choose out” of putting in further software program. - Select “Customized” or “Superior” Set up
This provides you extra management over what will get put in in your pc. - Obtain From Trusted Sources
Stick with well-known web sites or the official web site of the PDF software program. Keep away from shady obtain hyperlinks from advertisements or pop-ups. - Use Constructed-In Instruments
Many working programs (like Home windows or macOS) have already got easy PDF options like printing to PDF or viewing information, so that you may not want further software program in any respect. - Test Your Browser
In case your homepage all of the sudden modifications otherwise you see a brand new search engine, go to your browser settings and alter it again.
McAfee researches such functions proactively, and we overview the EULA and Privateness Coverage often for brand spanking new functions.
Technical Evaluation
EPI PDF Editor is distributed as an MSI installer. Upon launching, the installer window features a pre-selected choice to “Import your present browser settings into EPI PDF,” a alternative that seems unrelated to the software’s supposed function of dealing with PDF paperwork. Until the consumer actively opts out by unchecking the field, this motion will proceed robotically.
Installer Branding Mismatch
The installer is branded as “PDF Converter,” indicating that it’s designed for typical PDF duties similar to viewing, changing, splitting, merging, and watermarking paperwork. Nonetheless, the inclusion of an opt-out choice to import browser settings raises questions in regards to the software’s true performance.
Determine 1: Import browser settings
Privateness Coverage Battle
A better examination of the software program’s Privateness Coverage and Phrases reveals a misleading observe at play. Though the appliance is marketed as a PDF Converter, the authorized documentation tells a unique story. As proven in Determine 2, the Privateness Coverage of this system—branded as EPIbrowser—explicitly defines the software program as a browser designed for Home windows-based units. The screenshot shows each the EPIbrowser emblem and the coverage textual content, clearly indicating that the consumer shouldn’t be putting in a PDF software, however reasonably an online browser disguised as one.
Determine 2: Utility identify in phrases & situations
Determine 3: Utility that means in phrases
McAfee’s *PUP Coverage states that Software program installers should present software program licensing info previous to putting in any bundled elements.No ‘set up accomplished’ window pops up however as an alternative, a chromium-based browser opens with a tab opened that too with misleading conduct i.e. choices are current to edit the opened pdf however no motion being carried out. We are able to browse the web by opening different tabs.
Determine 4: Tab in EPI Browser
McAfee PUP coverage violated right here is, ”Set up: whether or not the consumer could make an knowledgeable resolution in regards to the software program set up or add-ons and might adequately again out of any undesired installations.” One other suspicious conduct noticed is set up location i.e. from ‘Appdata/Temp’ as an alternative of Program Recordsdata or Program Recordsdata(x86). Additional whereas checking management panel we discovered that pattern has created the entry with EPI Browser solely and may be uninstalled. Resulting from its misleading conduct, which aligns with the McAfee violation standards, this software has been categorized as a Doubtlessly Undesirable Program (PUP).
The McAfee WebAdvisor browser extension warns customers when making an attempt to navigate to web sites identified to distribute PUPs.
Determine 5: McAfee Internet Advisor Warning
Backside Line
Free PDF instruments are helpful — however concentrate on what else may include them. Just a few further minutes of studying can prevent from hours of frustration later. ✅
Keep good. Keep protected. And at all times know what you’re actually putting in.
Indicator of Compromise
| App Title | Distributed in numerous file names | SHA256 |
| EPI PDF Editor | viewpdftools.msi | c2d1ac2511eb2749cdc7ae889d484c246d3bd1e740725dc4dd2813c4b4d05c7b |
| onestartpdfdirect.msi | ||
| PDFSmartKit.msi | ||
| pdfzonepro.msi | ||
| 6c9136.msi | ||
| OneStartPDF-v4.5.282.2.msi |
In a digital world the place comfort usually comes at a hidden value, it’s essential to be vigilant in regards to the software program we set up — particularly free instruments like PDF converters. Because the case of EPI PDF Editor highlights, not all functions are what they declare to be. Misleading installations, hidden browser hijackers, and unauthorized information assortment can compromise each your privateness and your gadget’s efficiency. By staying knowledgeable and cautious — studying set up prompts, selecting superior choices, and counting on trusted sources — you possibly can defend your self from probably undesirable applications and keep away from falling into these traps.
At McAfee, our aim is to assist customers keep one step forward of misleading software program. Consciousness is your first line of protection. So, the subsequent time you obtain a free software, take a second to assume earlier than you click on. As a result of what looks as if a easy set up may very well be opening the door to far more.
*PUP :- PUP stands for Doubtlessly Undesirable Program which might be used to ship customers some undesirable functions like advertisements, browser addon, search engine modification, further applications {that a} consumer is mostly utilizing for day by day function.
