Authored by: Anuradha & Prabudh
PDF changing software program will be tremendous useful. Whether or not you’re turning a Phrase doc right into a PDF or merging recordsdata into one neat package deal, these instruments save time and make life simpler.
However right here’s one thing many individuals don’t understand — a few of these free PDF instruments include hidden baggage. Once you set up them, they may additionally sneak in a brand new search engine, browser extension, or change your homepage with out clearly asking for permission. 
What’s Going On?
Some PDF software program is bundled with additional applications. Which means while you obtain and set up the PDF converter, it might additionally set up:
- A brand new search engine in your browser
- Toolbars or browser extensions
- Apps that run within the background in your pc
More often than not, these are usually not viruses, however they will decelerate your pc, change your looking expertise, and even acquire your information.
Geographical Buyer Prevalence
The warmth map beneath illustrates the prevalence of EPI PDF software program within the subject in Q2, 2025.

We see that the highest nation encountering this software program is the US of America with over 118,000 McAfee machine encounters.
Why Do They Do This?
Many free software program corporations earn a living by together with these extras. Different corporations pay them to advertise their search instruments or browser extensions. It’s a manner for them to earn one thing in return for providing the software program at no cost.
Throughout our each day hunt at McAfee to safe our buyer, we got here throughout one such bundler utility known as EPI PDF Editor that clearly had misleading nature in direction of the tip consumer.
Key Takeaways:
- Learn Earlier than You Click on “Subsequent”
All the time take a second throughout set up to learn what every display screen says. Search for checkboxes that allow you to “choose out” of putting in additional software program. - Select “Customized” or “Superior” Set up
This provides you extra management over what will get put in in your pc. - Obtain From Trusted Sources
Follow well-known web sites or the official website of the PDF software program. Keep away from shady obtain hyperlinks from advertisements or pop-ups. - Use Constructed-In Instruments
Many working programs (like Home windows or macOS) have already got easy PDF options like printing to PDF or viewing recordsdata, so that you won’t want additional software program in any respect. - Examine Your Browser
In case your homepage instantly modifications otherwise you see a brand new search engine, go to your browser settings and alter it again.
McAfee researches such purposes proactively, and we overview the EULA and Privateness Coverage often for brand new purposes.
Technical Evaluation
EPI PDF Editor is distributed as an MSI installer. Upon launching, the installer window features a pre-selected choice to “Import your present browser settings into EPI PDF,” a selection that seems unrelated to the software’s supposed goal of dealing with PDF paperwork. Except the consumer actively opts out by unchecking the field, this motion will proceed routinely.
Installer Branding Mismatch
The installer is branded as “PDF Converter,” indicating that it’s designed for typical PDF duties comparable to viewing, changing, splitting, merging, and watermarking paperwork. Nonetheless, the inclusion of an opt-out choice to import browser settings raises questions in regards to the utility’s true performance.

Determine 1: Import browser settings
Privateness Coverage Battle
A better examination of the software program’s Privateness Coverage and Phrases reveals a misleading follow at play. Though the applying is marketed as a PDF Converter, the authorized documentation tells a distinct story. As proven in Determine 2, the Privateness Coverage of this system—branded as EPIbrowser—explicitly defines the software program as a browser designed for Home windows-based gadgets. The screenshot shows each the EPIbrowser emblem and the coverage textual content, clearly indicating that the consumer will not be putting in a PDF software, however moderately an online browser disguised as one.

Determine 2: Utility title in phrases & situations

Determine 3: Utility that means in phrases
McAfee’s *PUP Coverage states that Software program installers should present software program licensing data previous to putting in any bundled elements.No ‘set up accomplished’ window pops up however as a substitute, a chromium-based browser opens with a tab opened that too with misleading conduct i.e. choices are current to edit the opened pdf however no motion being carried out. We are able to browse the web by opening different tabs.

Determine 4: Tab in EPI Browser
McAfee PUP coverage violated right here is, ”Set up: whether or not the consumer could make an knowledgeable choice in regards to the software program set up or add-ons and might adequately again out of any undesired installations.” One other suspicious conduct noticed is set up location i.e. from ‘Appdata/Temp’ as a substitute of Program Recordsdata or Program Recordsdata(x86). Additional whereas checking management panel we discovered that pattern has created the entry with EPI Browser solely and will be uninstalled. As a consequence of its misleading conduct, which aligns with the McAfee violation standards, this utility has been categorised as a Probably Undesirable Program (PUP).
The McAfee WebAdvisor browser extension warns customers when making an attempt to navigate to web sites identified to distribute PUPs.

Determine 5: McAfee Internet Advisor Warning
Backside Line
Free PDF instruments are helpful — however concentrate on what else may include them. Just a few additional minutes of studying can prevent from hours of frustration later. ✅
Keep sensible. Keep protected. And at all times know what you’re actually putting in.
Indicator of Compromise
| App Title | Distributed in numerous file names | SHA256 |
| EPI PDF Editor | viewpdftools.msi | c2d1ac2511eb2749cdc7ae889d484c246d3bd1e740725dc4dd2813c4b4d05c7b |
| onestartpdfdirect.msi | ||
| PDFSmartKit.msi | ||
| pdfzonepro.msi | ||
| 6c9136.msi | ||
| OneStartPDF-v4.5.282.2.msi |
In a digital world the place comfort usually comes at a hidden price, it’s essential to be vigilant in regards to the software program we set up — particularly free instruments like PDF converters. Because the case of EPI PDF Editor highlights, not all purposes are what they declare to be. Misleading installations, hidden browser hijackers, and unauthorized information assortment can compromise each your privateness and your machine’s efficiency. By staying knowledgeable and cautious — studying set up prompts, selecting superior choices, and counting on trusted sources — you’ll be able to defend your self from doubtlessly undesirable applications and keep away from falling into these traps.
At McAfee, our objective is to assist customers keep one step forward of misleading software program. Consciousness is your first line of protection. So, the following time you obtain a free software, take a second to suppose earlier than you click on. As a result of what looks like a easy set up might be opening the door to far more.
*PUP :- PUP stands for Probably Undesirable Program which might be used to ship customers some undesirable purposes like advertisements, browser addon, search engine modification, additional applications {that a} consumer is mostly utilizing for each day goal.