Authored by: Anuradha & Prabudh
PDF changing software program may be tremendous useful. Whether or not you’re turning a Phrase doc right into a PDF or merging recordsdata into one neat bundle, these instruments save time and make life simpler.
However right here’s one thing many individuals don’t understand — a few of these free PDF instruments include hidden baggage. Whenever you set up them, they could additionally sneak in a brand new search engine, browser extension, or change your homepage with out clearly asking for permission. 
What’s Going On?
Some PDF software program is bundled with additional applications. Meaning if you obtain and set up the PDF converter, it could additionally set up:
A brand new search engine in your browser
Toolbars or browser extensions
Apps that run within the background in your laptop
More often than not, these will not be viruses, however they will decelerate your laptop, change your looking expertise, and even gather your information.
Geographical Buyer Prevalence
The warmth map beneath illustrates the prevalence of EPI PDF software program within the subject in Q2, 2025.
We see that the highest nation encountering this software program is the USA of America with over 118,000 McAfee machine encounters.
Why Do They Do This?
Many free software program firms generate profits by together with these extras. Different firms pay them to advertise their search instruments or browser extensions. It’s a manner for them to earn one thing in return for providing the software program totally free.
Throughout our every day hunt at McAfee to safe our buyer, we got here throughout one such bundler utility known as EPI PDF Editor that clearly had misleading nature in direction of the tip consumer.
Key Takeaways:
Learn Earlier than You Click on “Subsequent”All the time take a second throughout set up to learn what every display says. Search for checkboxes that allow you to “choose out” of putting in additional software program.
Select “Customized” or “Superior” InstallationThis offers you extra management over what will get put in in your laptop.
Obtain From Trusted SourcesStick to well-known web sites or the official web site of the PDF software program. Keep away from shady obtain hyperlinks from adverts or pop-ups.
Use Constructed-In ToolsMany working programs (like Home windows or macOS) have already got easy PDF options like printing to PDF or viewing recordsdata, so that you won’t want additional software program in any respect.
Examine Your BrowserIf your homepage abruptly adjustments otherwise you see a brand new search engine, go to your browser settings and alter it again.
McAfee researches such purposes proactively, and we evaluation the EULA and Privateness Coverage frequently for brand new purposes.
Technical Evaluation
EPI PDF Editor is distributed as an MSI installer. Upon launching, the installer window features a pre-selected choice to “Import your present browser settings into EPI PDF,” a selection that seems unrelated to the instrument’s supposed goal of dealing with PDF paperwork. Until the consumer actively opts out by unchecking the field, this motion will proceed routinely.
Installer Branding Mismatch
The installer is branded as “PDF Converter,” indicating that it’s designed for typical PDF duties similar to viewing, changing, splitting, merging, and watermarking paperwork. Nonetheless, the inclusion of an opt-out choice to import browser settings raises questions in regards to the utility’s true performance.
Determine 1: Import browser settings
Privateness Coverage Battle
A better examination of the software program’s Privateness Coverage and Phrases reveals a misleading apply at play. Though the applying is marketed as a PDF Converter, the authorized documentation tells a distinct story. As proven in Determine 2, the Privateness Coverage of this system—branded as EPIbrowser—explicitly defines the software program as a browser designed for Home windows-based units. The screenshot shows each the EPIbrowser brand and the coverage textual content, clearly indicating that the consumer isn’t putting in a PDF instrument, however quite an internet browser disguised as one.
Determine 2: Utility identify in phrases & circumstances
Determine 3: Utility which means in phrases
McAfee’s *PUP Coverage states that Software program installers should present software program licensing data previous to putting in any bundled parts.No ‘set up accomplished’ window pops up however as a substitute, a chromium-based browser opens with a tab opened that too with misleading habits i.e. choices are current to edit the opened pdf however no motion being carried out. We are able to browse the web by opening different tabs.
Determine 4: Tab in EPI Browser
McAfee PUP coverage violated right here is, ”Set up: whether or not the consumer could make an knowledgeable determination in regards to the software program set up or add-ons and might adequately again out of any undesired installations.” One other suspicious habits noticed is set up location i.e. from ‘Appdata/Temp’ as a substitute of Program Recordsdata or Program Recordsdata(x86). Additional whereas checking management panel we discovered that pattern has created the entry with EPI Browser solely and may be uninstalled. On account of its misleading habits, which aligns with the McAfee violation standards, this utility has been labeled as a Probably Undesirable Program (PUP).
The McAfee WebAdvisor browser extension warns customers when making an attempt to navigate to web sites recognized to distribute PUPs.
Determine 5: McAfee Internet Advisor Warning
Backside Line
Free PDF instruments are helpful — however pay attention to what else may include them. A couple of additional minutes of studying can prevent from hours of frustration later. ✅
Keep good. Keep secure. And all the time know what you’re actually putting in.
Indicator of Compromise
App Title
Distributed in several file names
SHA256
EPI PDF Editor
viewpdftools.msi
c2d1ac2511eb2749cdc7ae889d484c246d3bd1e740725dc4dd2813c4b4d05c7b
onestartpdfdirect.msi
PDFSmartKit.msi
pdfzonepro.msi
6c9136.msi
OneStartPDF-v4.5.282.2.msi
In a digital world the place comfort typically comes at a hidden value, it’s essential to be vigilant in regards to the software program we set up — particularly free instruments like PDF converters. Because the case of EPI PDF Editor highlights, not all purposes are what they declare to be. Misleading installations, hidden browser hijackers, and unauthorized information assortment can compromise each your privateness and your machine’s efficiency. By staying knowledgeable and cautious — studying set up prompts, selecting superior choices, and counting on trusted sources — you may defend your self from doubtlessly undesirable applications and keep away from falling into these traps.
At McAfee, our objective is to assist customers keep one step forward of misleading software program. Consciousness is your first line of protection. So, the subsequent time you obtain a free instrument, take a second to suppose earlier than you click on. As a result of what looks as if a easy set up could possibly be opening the door to rather more.
*PUP :- PUP stands for Probably Undesirable Program which can be used to ship customers some undesirable purposes like adverts, browser addon, search engine modification, additional applications {that a} consumer is mostly utilizing for every day goal.
x3Cimg top=”1″ width=”1″ model=”show:none” src=”https://www.fb.com/tr?id=766537420057144&ev=PageView&noscript=1″ />x3C/noscript>’);