Authored by: Anuradha & Prabudh
PDF changing software program may be tremendous useful. Whether or not you’re turning a Phrase doc right into a PDF or merging information into one neat package deal, these instruments save time and make life simpler.
However right here’s one thing many individuals don’t notice — a few of these free PDF instruments include hidden baggage. If you set up them, they may additionally sneak in a brand new search engine, browser extension, or change your homepage with out clearly asking for permission. 
What’s Going On?
Some PDF software program is bundled with further packages. Which means if you obtain and set up the PDF converter, it could additionally set up:
- A brand new search engine in your browser
- Toolbars or browser extensions
- Apps that run within the background in your pc
More often than not, these will not be viruses, however they will decelerate your pc, change your searching expertise, and even gather your knowledge.
Geographical Buyer Prevalence
The warmth map beneath illustrates the prevalence of EPI PDF software program within the area in Q2, 2025.
We see that the highest nation encountering this software program is the USA of America with over 118,000 McAfee system encounters.
Why Do They Do This?
Many free software program corporations generate income by together with these extras. Different corporations pay them to advertise their search instruments or browser extensions. It’s a manner for them to earn one thing in return for providing the software program without cost.
Throughout our day by day hunt at McAfee to safe our buyer, we got here throughout one such bundler software known as EPI PDF Editor that clearly had misleading nature in direction of the tip person.
Key Takeaways:
- Learn Earlier than You Click on “Subsequent”
At all times take a second throughout set up to learn what every display says. Search for checkboxes that allow you to “choose out” of putting in further software program. - Select “Customized” or “Superior” Set up
This offers you extra management over what will get put in in your pc. - Obtain From Trusted Sources
Keep on with well-known web sites or the official web site of the PDF software program. Keep away from shady obtain hyperlinks from adverts or pop-ups. - Use Constructed-In Instruments
Many working programs (like Home windows or macOS) have already got easy PDF options like printing to PDF or viewing information, so that you may not want further software program in any respect. - Examine Your Browser
In case your homepage all of a sudden modifications otherwise you see a brand new search engine, go to your browser settings and alter it again.
McAfee researches such purposes proactively, and we evaluate the EULA and Privateness Coverage repeatedly for brand spanking new purposes.
Technical Evaluation
EPI PDF Editor is distributed as an MSI installer. Upon launching, the installer window features a pre-selected choice to “Import your present browser settings into EPI PDF,” a selection that seems unrelated to the device’s supposed function of dealing with PDF paperwork. Except the person actively opts out by unchecking the field, this motion will proceed mechanically.
Installer Branding Mismatch
The installer is branded as “PDF Converter,” indicating that it’s designed for typical PDF duties equivalent to viewing, changing, splitting, merging, and watermarking paperwork. Nevertheless, the inclusion of an opt-out choice to import browser settings raises questions in regards to the software’s true performance.
Determine 1: Import browser settings
Privateness Coverage Battle
A more in-depth examination of the software program’s Privateness Coverage and Phrases reveals a misleading follow at play. Though the applying is marketed as a PDF Converter, the authorized documentation tells a distinct story. As proven in Determine 2, the Privateness Coverage of this system—branded as EPIbrowser—explicitly defines the software program as a browser designed for Home windows-based units. The screenshot shows each the EPIbrowser brand and the coverage textual content, clearly indicating that the person is just not putting in a PDF device, however relatively an online browser disguised as one.
Determine 2: Utility identify in phrases & circumstances
Determine 3: Utility that means in phrases
McAfee’s *PUP Coverage states that Software program installers should present software program licensing info previous to putting in any bundled parts.No ‘set up accomplished’ window pops up however as an alternative, a chromium-based browser opens with a tab opened that too with misleading habits i.e. choices are current to edit the opened pdf however no motion being carried out. We will browse the web by opening different tabs.
Determine 4: Tab in EPI Browser
McAfee PUP coverage violated right here is, ”Set up: whether or not the person could make an knowledgeable determination in regards to the software program set up or add-ons and might adequately again out of any undesired installations.” One other suspicious habits noticed is set up location i.e. from ‘Appdata/Temp’ as an alternative of Program Recordsdata or Program Recordsdata(x86). Additional whereas checking management panel we discovered that pattern has created the entry with EPI Browser solely and may be uninstalled. Because of its misleading habits, which aligns with the McAfee violation standards, this software has been categorized as a Doubtlessly Undesirable Program (PUP).
The McAfee WebAdvisor browser extension warns customers when making an attempt to navigate to web sites identified to distribute PUPs.
Determine 5: McAfee Internet Advisor Warning
Backside Line
Free PDF instruments are helpful — however concentrate on what else may include them. A couple of further minutes of studying can prevent from hours of frustration later. ✅
Keep good. Keep secure. And at all times know what you’re actually putting in.
Indicator of Compromise
App Title | Distributed in numerous file names | SHA256 |
EPI PDF Editor | viewpdftools.msi | c2d1ac2511eb2749cdc7ae889d484c246d3bd1e740725dc4dd2813c4b4d05c7b |
onestartpdfdirect.msi | ||
PDFSmartKit.msi | ||
pdfzonepro.msi | ||
6c9136.msi | ||
OneStartPDF-v4.5.282.2.msi |
In a digital world the place comfort typically comes at a hidden value, it’s essential to be vigilant in regards to the software program we set up — particularly free instruments like PDF converters. Because the case of EPI PDF Editor highlights, not all purposes are what they declare to be. Misleading installations, hidden browser hijackers, and unauthorized knowledge assortment can compromise each your privateness and your system’s efficiency. By staying knowledgeable and cautious — studying set up prompts, selecting superior choices, and counting on trusted sources — you may shield your self from doubtlessly undesirable packages and keep away from falling into these traps.
At McAfee, our objective is to assist customers keep one step forward of misleading software program. Consciousness is your first line of protection. So, the following time you obtain a free device, take a second to assume earlier than you click on. As a result of what looks as if a easy set up could possibly be opening the door to way more.
*PUP :- PUP stands for Doubtlessly Undesirable Program which are used to ship customers some undesirable purposes like adverts, browser addon, search engine modification, further packages {that a} person is usually utilizing for day by day function.