← All guides

Setup guide · Last reviewed 10 November 2026

How to spot a bundled installer before it is too late

The download portals, fake update buttons and pre-ticked extras that put unwanted software on a new PC, and the four checks that stop them.

The reason InstallShelf links to publishers is not snobbery about website design. It is that the space between a Download button and the actual file is where toolbars, homepage changes, repackaged installers and outright payloads live. That gap is a business model.

Once you know the pattern, avoiding it takes about ten seconds per download.

Four checks before you run anything

Check the address bar matches the company or project that makes the software, not a site whose name contains the product name plus download. Look for more than one Download button; a page with three large green buttons is usually showing ads, not choices. Choose the custom or advanced install screen rather than the recommended one. And check the filename: a program called PhotoEditor should not arrive as PhotoEditor_Installer_2026_bundle.exe.

If the publisher's own page is confusing, that is a legitimate reason to stop and read, not a reason to find a cleaner-looking mirror. A prettier download button from an unknown host is a worse deal.

The tools this step calls for, with their real licence and platform details:

ProgramLicence / pricePlatformsWhy it is on the list
Firefox
Publisher's site ↗
Free · Open sourceWindows, macOS, Linux, Android, iOSThe safest default for most people. It runs its own engine instead of Chromium, blocks trackers out of the box, and carries extensions the Chromium side is busy removing. Slightly rougher on a handful of Google properties.
7-Zip
Publisher's site ↗
Free · Open sourceWindows, LinuxThe first thing to install on any new PC. Unpacks everything, compresses better than WinRAR, and has never shipped a bundled toolbar in twenty-five years. Plain interface, zero nonsense.

Why we exclude some tools entirely

Our About page states the rule plainly: a single bundled toolbar in a product's distribution history is enough to keep it off the list permanently. This is why entire genres are missing. PC boosters, registry cleaners and driver updaters are the categories where bundling is most common and the claimed benefit is hardest to measure.

A publisher changing its download page is a correction we make to the link. We do not solve a broken official link by pointing at an unofficial one.

The tools this step calls for, with their real licence and platform details:

ProgramLicence / pricePlatformsWhy it is on the list
WizTree
Publisher's site ↗
Free for personal useWindowsReads the master file table directly and shows you what is eating your disk in seconds, not minutes, with a treemap view. The fastest way to find the 40 GB you did not know you had.
CrystalDiskInfo
Publisher's site ↗
Free · Open sourceWindowsShows the SMART health of every drive in plain language, so you get a warning before a disk dies instead of after. Check any second-hand laptop with this before you hand over money.

If you already installed something unwanted

Uninstall from the operating system's own app list first, not from a cleaner that promises to remove every trace. Restart, then check the browser's extensions and startup pages, because those changes often survive the uninstall. Only then consider a targeted removal tool, and take a restore point first.

The tools this step calls for, with their real licence and platform details:

ProgramLicence / pricePlatformsWhy it is on the list
Revo Uninstaller Free
Publisher's site ↗
Free + paid tiersWindowsRemoves an application and then hunts down the leftover files and registry keys Windows leaves behind. Use the free version for the occasional stubborn uninstall, not as a weekly cleaning ritual.
WizTree
Publisher's site ↗
Free for personal useWindowsReads the master file table directly and shows you what is eating your disk in seconds, not minutes, with a treemap view. The fastest way to find the 40 GB you did not know you had.

Mistakes to avoid

Questions people ask

Is an official download ever unsafe?

No source is perfectly safe, but a publisher link is the one you can attribute and verify. It is also the one that gets a security fix first.

Do I need a download manager?

No. The browser downloads files directly, and a download manager is another installer to vet.

Related guides

Or see all guides and category explainers.

How to read this page. How to read this page. Platform, licence and publisher details come from our directory data. Where an independent review, audit or survey is mentioned, it is summarised in our own words with the source named and linked; our /sources page sets out that policy. The recommendation, the trade-offs and every 'skip it if' line are our editorial judgement. We do not run benchmarks, publish measured performance figures or host installers, and every download link goes to the publisher's own site. If a detail is out of date, our About page explains how to tell us.