Authored by: Anuradha Prabudh
PDF changing software program might be tremendous useful. Whether or not you’re turning a Phrase doc right into a PDF or merging recordsdata into one neat bundle, these instruments save time and make life simpler.
However right here’s one thing many individuals don’t notice — a few of these free PDF instruments include hidden baggage. While you set up them, they may additionally sneak in a brand new search engine, browser extension, or change your homepage with out clearly asking for permission. 
What’s Going On?
Some PDF software program is bundled with further packages. Meaning whenever you obtain and set up the PDF converter, it could additionally set up:
- A brand new search engine in your browser
- Toolbars or browser extensions
- Apps that run within the background in your pc
More often than not, these usually are not viruses, however they will decelerate your pc, change your searching expertise, and even gather your information.
Geographical Buyer Prevalence
The warmth map under illustrates the prevalence of EPI PDF software program within the subject in Q2, 2025.
We see that the highest nation encountering this software program is america of America with over 118,000 McAfee gadget encounters.
Why Do They Do This?
Many free software program corporations earn a living by together with these extras. Different corporations pay them to advertise their search instruments or browser extensions. It’s a approach for them to earn one thing in return for providing the software program without spending a dime.
Throughout our day by day hunt at McAfee to safe our buyer, we got here throughout one such bundler software referred to as EPI PDF Editor that clearly had misleading nature in direction of the top consumer.
Key Takeaways:
- Learn Earlier than You Click on “Subsequent”
At all times take a second throughout set up to learn what every display screen says. Search for checkboxes that allow you to “decide out” of putting in further software program. - Select “Customized” or “Superior” Set up
This offers you extra management over what will get put in in your pc. - Obtain From Trusted Sources
Follow well-known web sites or the official website of the PDF software program. Keep away from shady obtain hyperlinks from adverts or pop-ups. - Use Constructed-In Instruments
Many working programs (like Home windows or macOS) have already got easy PDF options like printing to PDF or viewing recordsdata, so that you may not want further software program in any respect. - Examine Your Browser
In case your homepage out of the blue modifications otherwise you see a brand new search engine, go to your browser settings and alter it again.
McAfee researches such functions proactively, and we evaluate the EULA and Privateness Coverage frequently for brand spanking new functions.
Technical Evaluation
EPI PDF Editor is distributed as an MSI installer. Upon launching, the installer window features a pre-selected choice to “Import your present browser settings into EPI PDF,” a selection that seems unrelated to the instrument’s meant function of dealing with PDF paperwork. Except the consumer actively opts out by unchecking the field, this motion will proceed robotically.
Installer Branding Mismatch
The installer is branded as “PDF Converter,” indicating that it’s designed for typical PDF duties comparable to viewing, changing, splitting, merging, and watermarking paperwork. Nonetheless, the inclusion of an opt-out choice to import browser settings raises questions in regards to the software’s true performance.
Determine 1: Import browser settings
Privateness Coverage Battle
A more in-depth examination of the software program’s Privateness Coverage and Phrases reveals a misleading apply at play. Though the applying is marketed as a PDF Converter, the authorized documentation tells a distinct story. As proven in Determine 2, the Privateness Coverage of this system—branded as EPIbrowser—explicitly defines the software program as a browser designed for Home windows-based gadgets. The screenshot shows each the EPIbrowser brand and the coverage textual content, clearly indicating that the consumer isn’t putting in a PDF instrument, however relatively an internet browser disguised as one.
Determine 2: Software title in phrases & circumstances
Determine 3: Software which means in phrases
McAfee’s *PUP Coverage states that Software program installers should present software program licensing info previous to putting in any bundled parts.No ‘set up accomplished’ window pops up however as an alternative, a chromium-based browser opens with a tab opened that too with misleading habits i.e. choices are current to edit the opened pdf however no motion being carried out. We will browse the web by opening different tabs.
Determine 4: Tab in EPI Browser
McAfee PUP coverage violated right here is, ”Set up: whether or not the consumer could make an knowledgeable determination in regards to the software program set up or add-ons and may adequately again out of any undesired installations.” One other suspicious habits noticed is set up location i.e. from ‘Appdata/Temp’ as an alternative of Program Information or Program Information(x86). Additional whereas checking management panel we discovered that pattern has created the entry with EPI Browser solely and might be uninstalled. As a consequence of its misleading habits, which aligns with the McAfee violation standards, this software has been categorised as a Doubtlessly Undesirable Program (PUP).
The McAfee WebAdvisor browser extension warns customers when trying to navigate to web sites recognized to distribute PUPs.
Determine 5: McAfee Internet Advisor Warning
Backside Line
Free PDF instruments are helpful — however concentrate on what else would possibly include them. A number of further minutes of studying can prevent from hours of frustration later. ✅
Keep good. Keep secure. And all the time know what you’re actually putting in.
Indicator of Compromise
| App Title | Distributed in several file names | SHA256 |
| EPI PDF Editor | viewpdftools.msi | c2d1ac2511eb2749cdc7ae889d484c246d3bd1e740725dc4dd2813c4b4d05c7b |
| onestartpdfdirect.msi | ||
| PDFSmartKit.msi | ||
| pdfzonepro.msi | ||
| 6c9136.msi | ||
| OneStartPDF-v4.5.282.2.msi |
In a digital world the place comfort usually comes at a hidden value, it’s essential to be vigilant in regards to the software program we set up — particularly free instruments like PDF converters. Because the case of EPI PDF Editor highlights, not all functions are what they declare to be. Misleading installations, hidden browser hijackers, and unauthorized information assortment can compromise each your privateness and your gadget’s efficiency. By staying knowledgeable and cautious — studying set up prompts, selecting superior choices, and counting on trusted sources — you may shield your self from probably undesirable packages and keep away from falling into these traps.
At McAfee, our purpose is to assist customers keep one step forward of misleading software program. Consciousness is your first line of protection. So, the following time you obtain a free instrument, take a second to suppose earlier than you click on. As a result of what looks as if a easy set up could possibly be opening the door to far more.
*PUP :- PUP stands for Doubtlessly Undesirable Program which can be used to ship customers some undesirable functions like adverts, browser addon, search engine modification, further packages {that a} consumer is usually utilizing for day by day function.
