none
cmd assoc

    Question

  • At then ennd of the lines there is

    zfsendto target=CLSID\{.......}

    within the brackets is a long number.

     

    IS THIS NUMBER UNIQUE TO MY COMPUTER - A DELL 1545 LAPTOP?

    Wednesday, August 31, 2011 2:38 PM

Answers

  • The class IDs point to a system process. All Windows 7 systems have the same setting.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    Friday, September 02, 2011 8:23 AM
  • "Loubie" wrote in message news:7fe1a790-5f3d-4664-b058-107a89846bb7...

    Hi,

     

    I have just received a call from Windows Tech Support team (possible scam) asking me to press start and R and then in the open box type CMD. I was then asked to type assoc in the black box that appeared. Is there a possibility this was genuine as it had scam written all over it and I wasn't very nice to the lady I spoke to!!

    Any help would be gratefully accepted!

    Unless you booked the call yourself, it was a scam – MS NEVER cold-calls.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by SimonKC Saturday, September 10, 2011 2:49 PM
    Saturday, September 10, 2011 8:59 AM

All replies

  • Where do you see this line? Can you post a screenshot? Thanks!
    Kunal D Mehta - a Windows Server Enthusiast | My first TechNet Wiki Article
    Thursday, September 01, 2011 4:36 PM
  • here is the screen that follows cmd then assoc

    .grp=MSProgramGroup
    .H1C=h1cfile
    .H1D=h1dfile
    .H1F=h1ffile
    .H1H=h1hfile
    .H1K=h1kfile
    .H1Q=h1qfile
    .H1S=h1sfile
    .H1T=h1tfile
    .H1V=h1vfile
    .H1W=h1wfile
    .HeartsSave-ms=MicrosoftHeartsSaveFile
    .hlp=hlpfile
    .hta=htafile
    .htm=htmlfile
    .html=htmlfile
    .hxa=MSHelp.hxa.2.5
    .hxc=MSHelp.hxc.2.5
    .hxd=MSHelp.hxd.2.5
    .hxe=MSHelp.hxe.2.5
    .hxf=MSHelp.hxf.2.5
    .hxh=MSHelp.hxh.2.5
    .hxi=MSHelp.hxi.2.5
    .hxk=MSHelp.hxk.2.5
    .hxq=MSHelp.hxq.2.5
    .hxr=MSHelp.hxr.2.5
    .hxs=MSHelp.hxs.2.5
    .hxt=MSHelp.hxt.2.5
    .hxv=MSHelp.hxv.2.5
    .hxw=MSHelp.hxa.2.5
    .icc=icmfile
    .icl=IconLibraryFile
    .icm=icmfile
    .ico=icofile
    .img=Windows.IsoFile
    .inf=inffile
    .ini=inifile
    .iqy=iqyfile
    .iso=Windows.IsoFile
    .jar=jarfile
    .jewelquestsolitaire2SavedGame=jewelquestsolitaire2SavedGame
    .jfif=pjpegfile
    .jnlp=JNLPFile
    .jnt=jntfile
    .Job=JobObject
    .jod=Microsoft.Jet.OLEDB.4.0
    .jpe=jpegfile
    .jpeg=jpegfile
    .jpg=jpegfile
    .js=JSFile
    .JSE=JSEFile
    .jtp=jtpfile
    .jtx=Windows.XPSReachViewer
    .label=Label
    .lex=LEXFile
    .library-ms=LibraryFolder
    .lnk=lnkfile
    .log=txtfile
    .m1v=WMP11.AssocFile.MPEG
    .M2T=WMP11.AssocFile.M2TS
    .M2TS=WMP11.AssocFile.M2TS
    .M2V=WMP11.AssocFile.MPEG
    .m3u=WMP11.AssocFile.m3u
    .m4a=WMP11.AssocFile.M4A
    .m4v=WMP11.AssocFile.MP4
    .MahjongTitansSave-ms=MicrosoftMahjongTitansSaveFile
    .mapimail=CLSID\{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}
    .mcl=MediaCenter.MCL
    .mfp=MacromediaFlashPaper.MacromediaFlashPaper
    .mgc=MediaCatalogMGC
    .mht=mhtmlfile
    .mhtml=mhtmlfile
    .mid=WMP11.AssocFile.MIDI
    .midi=WMP11.AssocFile.MIDI
    .mig=migfile
    .MinesweeperSave-ms=MicrosoftMinesweeperSaveFile
    .mlc=LpkSetup.1
    .mml=MediaCatalogMML
    .mmw=MediaCatalogMMW
    .MOD=WMP11.AssocFile.MPEG
    .monopolySavedGame=monopolySavedGame
    .mov=WMP11.AssocFile.MOV
    .mp2=WMP11.AssocFile.MP3
    .mp2v=WMP11.AssocFile.MPEG
    .mp3=WMP11.AssocFile.MP3
    .mp4=WMP11.AssocFile.MP4
    .mp4v=WMP11.AssocFile.MP4
    .mpa=WMP11.AssocFile.MPEG
    .mpe=WMP11.AssocFile.MPEG
    .mpeg=WMP11.AssocFile.MPEG
    .mpf=MediaPackageFile
    .mpg=WMP11.AssocFile.MPEG
    .mpv2=WMP11.AssocFile.MPEG
    .msc=MSCFile
    .msdvd=Windows.DVD.Maker
    .msi=Msi.Package
    .msp=Msi.Patch
    .msrcincident=RemoteAssistance.1
    .msstyles=msstylesfile
    .msu=Microsoft.System.Update.1
    .MTS=WMP11.AssocFile.M2TS
    .mydocs=CLSID\{ECF03A32-103D-11d2-854D-006008059367}
    .nfo=MSInfoFile
    .nws=WindowsLiveMail.News.1
    .ocx=ocxfile
    .odc=odcfile
    .odccubefile=odccubefile
    .odcdatabasefile=odcdatabasefile
    .odcnewfile=odcnewfile
    .odctablefile=odctablefile
    .odp=PowerPoint.OpenDocumentPresentation.12
    .ods=Excel.OpenDocumentSpreadsheet.12
    .odt=Word.OpenDocumentText.12
    .one=OneNote.Section.1
    .onepkg=OneNote.Package
    .onetoc=OneNote.TableOfContents
    .onetoc2=OneNote.TableOfContents.12
    .opc=OPCFile
    .oqy=oqyfile
    .osdx=opensearchdescription
    .otf=otffile
    .p10=P10File
    .p12=PFXFile
    .p7b=SPCFile
    .p7c=certificate_wab_auto_file
    .p7m=P7MFile
    .p7r=P7RFile
    .p7s=P7SFile
    .pak=CT4_PAK
    .partial=IE.AssocFile.PARTIAL
    .pbk=pbkfile
    .pcb=PCBFile
    .pdf=AcroExch.Document
    .pdfxml=AcroExch.pdfxml
    .pdx=PDXFileType
    .peggleSavedGame=peggleSavedGame
    .perfmoncfg=Diagnostic.Perfmon.Config
    .pfm=pfmfile
    .pfx=PFXFile
    .pif=piffile
    .pip=PIPFile
    .pko=PKOFile
    .plantsvszombiesSavedGame=plantsvszombiesSavedGame
    .pnf=pnffile
    .png=pngfile
    .polarbowlerSavedGame=polarbowlerSavedGame
    .polargolferSavedGame=polargolferSavedGame
    .pot=PowerPoint.Template.8
    .pothtml=powerpointhtmltemplate
    .potm=PowerPoint.TemplateMacroEnabled.12
    .potx=PowerPoint.Template.12
    .ppa=PowerPoint.Addin.8
    .ppam=PowerPoint.Addin.12
    .pps=PowerPoint.SlideShow.8
    .ppsm=PowerPoint.SlideShowMacroEnabled.12
    .ppsx=PowerPoint.SlideShow.12
    .ppt=PowerPoint.Show.8
    .ppthtml=powerpointhtmlfile
    .pptm=PowerPoint.ShowMacroEnabled.12
    .pptmhtml=powerpointmhtmlfile
    .pptx=PowerPoint.Show.12
    .pptxml=powerpointxmlfile
    .prf=prffile
    .ps1=Microsoft.PowerShellScript.1
    .ps1xml=Microsoft.PowerShellXMLData.1
    .psc1=Microsoft.PowerShellConsole.1
    .psd1=Microsoft.PowerShellData.1
    .psm1=Microsoft.PowerShellModule.1
    .PurblePairsSave-ms=MicrosoftPurblePairsSaveFile
    .PurbleShopSave-ms=MicrosoftPurbleShopSaveFile
    .pwz=PowerPoint.Wizard.8
    .qdat=QuickTimeInstallCache
    .qds=SavedDsQuery
    .qpx=QuickTimePlayerExtension
    .qtp=QuickTimePreferences
    .qts=QuickTimeSystem
    .qtx=QuickTimeExtension
    .rat=ratfile
    .RDP=RDP.File
    .reg=regfile
    .rels=xmlfile
    .resmoncfg=Diagnostic.Resmon.Config
    .rle=rlefile
    .rll=dllfile
    .rmi=WMP11.AssocFile.MIDI
    .rqy=rqyfile
    .rss=WindowsLiveMail.Email.1
    .rtf=Word.RTF.8
    .scf=SHCmdFile
    .scp=txtfile
    .scr=scrfile
    .scrabblehasbroSavedGame=scrabblehasbroSavedGame
    .sct=scriptletfile
    .sdf=SQLServerCompactEditionDatabaseFile
    .search-ms=SearchFolder
    .searchConnector-ms=SearchConnectorFolder
    .secstore=AcroExch.SecStore
    .sfcache=RDBFileProperties.1
    .shtml=shtmlfile
    .sldm=PowerPoint.SlideMacroEnabled.12
    .sldx=PowerPoint.Slide.12
    .slk=Excel.SLK
    .slupkg-ms=MSSppPackageFile
    .snd=WMP11.AssocFile.AU
    .SolitaireSave-ms=MicrosoftSolitaireSaveFile
    .spc=SPCFile
    .SpiderSolitaireSave-ms=MicrosoftSpiderSolitaireSaveFile
    .spl=ShockwaveFlash.ShockwaveFlash
    .sst=CertificateStoreFile
    .stl=STLFile
    .svg=svgfile
    .swf=ShockwaveFlash.ShockwaveFlash
    .sys=sysfile
    .theme=themefile
    .themepack=themepackfile
    .thmx=OfficeTheme.12
    .tif=TIFImage.Document
    .tiff=TIFImage.Document
    .TS=WMP11.AssocFile.TTS
    .ttc=ttcfile
    .ttf=ttffile
    .TTS=WMP11.AssocFile.TTS
    .txt=txtfile
    .UDL=MSDASC
    .URL=InternetShortcut
    .uxdc=UXDCFILE
    .VBE=VBEFile
    .vbs=VBSFile
    .vcf=vcard_wab_auto_file
    .vdx=VisioViewer.Viewer
    .vfz3=vfz3_file
    .virtualfamiliesSavedGame=virtualfamiliesSavedGame
    .virtualvillagers3SavedGame=virtualvillagers3SavedGame
    .vsd=VisioViewer.Viewer
    .vss=VisioViewer.Viewer
    .vst=VisioViewer.Viewer
    .vsx=VisioViewer.Viewer
    .vtx=VisioViewer.Viewer
    .vxd=vxdfile
    .wab=wab_auto_file
    .wav=WMP11.AssocFile.WAV
    .wax=WMP11.AssocFile.WAX
    .wbcat=wbcatfile
    .wbk=Word.Backup.8
    .wcx=wcxfile
    .wdp=wdpfile
    .webpnp=webpnpFile
    .website=Microsoft.Website
    .wiz=Word.Wizard.8
    .wlg=wlgFile
    .wm=WMP11.AssocFile.ASF
    .wma=WMP11.AssocFile.WMA
    .WMD=WMP11.AssocFile.WMD
    .wmdb=WMP.WMDBFile
    .wmf=wmffile
    .WMS=WMP11.AssocFile.WMS
    .wmv=WMP11.AssocFile.WMV
    .wmx=WMP11.AssocFile.ASX
    .wmz=WMP11.AssocFile.WMZ
    .wpl=WMP11.AssocFile.WPL
    .wpost=WindowsLiveWriter.Post.1
    .wsc=scriptletfile
    .WSF=WSFFile
    .WSH=WSHFile
    .WTV=MediaCenter.WTVFile
    .wtx=txtfile
    .wvx=WMP11.AssocFile.WVX
    .xaml=Windows.XamlDocument
    .xbap=Windows.Xbap
    .xdp=AcroExch.XDPDoc
    .xevgenxml=XEV.GenericApp
    .xfdf=AcroExch.XFDFDoc
    .xht=xhtmlfile
    .xhtml=xhtmlfile
    .xla=Excel.Addin
    .xlam=Excel.AddInMacroEnabled
    .xlk=Excel.Backup
    .xll=Excel.XLL
    .xlm=Excel.Macrosheet
    .xls=Excel.Sheet.8
    .xlsb=Excel.SheetBinaryMacroEnabled.12
    .xlshtml=Excelhtmlfile
    .xlsm=Excel.SheetMacroEnabled.12
    .xlsmhtml=excelmhtmlfile
    .xlsx=Excel.Sheet.12
    .xlt=Excel.Template.8
    .xlthtml=Excelhtmltemplate
    .xltm=Excel.TemplateMacroEnabled
    .xltx=Excel.Template
    .xlw=Excel.Workspace
    .xlxml=Excelxmlss
    .xml=xmlfile
    .xps=Windows.XPSReachViewer
    .xrm-ms=MSSppLicenseFile
    .xsl=xslfile
    .yahtzeeSavedGame=yahtzeeSavedGame
    .zfsendtotarget=CLSID\{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}
    .zip=CompressedFolder

    C:\Users\SimonC>

    The penultimate line is the one I refer to; is this reference unique to my laptop?

    Thanks for coming back so soon. This query stems from my trying to solve a very strange corrupted user file

     

    Thursday, September 01, 2011 4:58 PM
  • That particular key statement belongs to the "Compressed Folder Send To Target File" It should be there, it allows you to right click and send to .zip (Compression) for basic file zip/unzip when you do not have a compression utility.  It's not a virus or malware, just a default placeholder for the shortcut.
    :P Advice offered, If you need more help it is advised to seek the council and advice of paid professionals. The answer is always 42, or reboot.
    • Proposed as answer by Jason Hiegel Thursday, September 01, 2011 6:00 PM
    Thursday, September 01, 2011 5:32 PM
  • The class IDs point to a system process. All Windows 7 systems have the same setting.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    Friday, September 02, 2011 8:23 AM
  • Hi,

     

    I have just received a call from Windows Tech Support team (possible scam) asking me to press start and R and then in the open box type CMD. I was then asked to type assoc in the black box that appeared. Is there a possibility this was genuine as it had scam written all over it and I wasn't very nice to the lady I spoke to!!

    Any help would be gratefully accepted!

    Thursday, September 08, 2011 11:53 AM
  • "Loubie" wrote in message news:7fe1a790-5f3d-4664-b058-107a89846bb7...

    Hi,

     

    I have just received a call from Windows Tech Support team (possible scam) asking me to press start and R and then in the open box type CMD. I was then asked to type assoc in the black box that appeared. Is there a possibility this was genuine as it had scam written all over it and I wasn't very nice to the lady I spoke to!!

    Any help would be gratefully accepted!

    Unless you booked the call yourself, it was a scam – MS NEVER cold-calls.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by SimonKC Saturday, September 10, 2011 2:49 PM
    Saturday, September 10, 2011 8:59 AM
  • I got the same call today (1/24/2012) and the background noise sounded like a lot of other people making the same kind of conversations with folks.  Bottom line it sounded like some scam and I hung up before I found this thread.  I stalled and googled the cmd assoc but did not  find this while I still was on the phone.

    Did not go far enoung to find out what the scam is all about.

    Tuesday, January 24, 2012 5:53 PM
  • Hi,

    I have just received a call from Windows Tech Support team (possible scam) asking me to press start and R and then in the open box type CMD. I was then asked to type assoc in the black box that appeared. Is there a possibility this was genuine as it had scam written all over it and I wasn't very nice to the lady I spoke to!!

    Any help would be gratefully accepted!


    I also received a call (March 27,2012), allegedly from Windows Tech Support saying my computer was automatically downloading malicious software, and to Run cmd, then to type in assoc. I knew it was a scam, as the "tech" sounded foreign, and did not explain at any point what they were attempting to do. A real tech would verify your identity, and then carefully explain anything they wanted to do. Not exactly sure what they were trying to do with assoc, but it definitely is not good.
    • Edited by Warpoet80 Wednesday, March 28, 2012 4:41 AM
    Wednesday, March 28, 2012 4:41 AM
  • I received a call today from “Windows Support” which I thought “yeah sure”
    As my computer has been playing up lately I did wonder if maybe they are genuine so decided to go along with them but tread carefully

    After running cmd assoc they drew my attention to a long number near the bottom of the list. This they said was my computer’s unique reference number so read it out to me to check that they had the correct computer which was spreading viruses on the internet
    They offered to sort this via remote assistance at which point the alarm bells rang and I hung up

    It turns out that most computers have this same number but they tell everyone the same cock n bull story. They do this to get your confidence as they must be genuine or how would they know my computer’s number?

    No doubt some people will fall for this and end up with a keylogger and goodness knows what else on their computer

    If you get a call asking you to run cmd assoc – It’s a scam

    Saturday, May 26, 2012 10:29 AM
  • Terry0011,

    I had the exact same thing, did something happen to your computer? 

    Thursday, June 21, 2012 6:08 PM
  • I have the exact same numbers as you show here on my home computer. Also on the two computers at work with the exact same numbers. Also on other lines for mydocs and mapImail the exact same numbers.

    I had some Indian call me today trying to say this was my computer ID number to my computer. BULL. They were trying to get remote access to my computer to say it was sending out virus's to other computers. BULL. Microsoft never calls you like this. Stay away from this scammer.

    Tuesday, December 11, 2012 1:58 AM
  • Just for the record - I got that same call today: July 22, 2013. I did the same as others here - I could tell it was a scam in the first 30 seconds as the guy said he worked for the "Windows Company" [Note - I was a msft employee for 15 years and nothing they did or said was even remotely related to the way msft deals with customer issues]. I said "you mean you work for Microsoft?" and he said "no, the windows company - the one who makes the windows operating system."

    So red flags go up and I say "Before we start, give me your phone number in case we get disconnected - then I can call you back." He gave me this number: 877-290-8355 ext: 555. I have not tried calling this number back.

    Here was the sequence:

    1. He first asked me to do the keyboard combo WinKey - R. I told him nothing happened. 

    He then explained that he had my product key an their were only "2 people in the world with that number: me and msft."

    2. He then asked me to do cmd and from the DOS prompt to execute ASSOC. I told him that executed (even though I did not actually execute the command). He then asked me to find that long number and then he said that was my windows product key and he read it off to me and asked of he had the right number. I said "yes."

    3. He then said my computer ha reported to msft servers  that it was badly infected and we (him and me) were going to get rid of the virus files. He asked me to click the start menu and enter "eventvwr' in the box and click OK. I actually did this running windows using emulation software on a MAC. This time nothing happened and he had me redo it 4 or 5 times. I asked him to just give me the names of the files and what folders they were in and I would just go in and delete them. When I said that he would just keep talking about entering "eventvwr".

    After the 4th or 5th time of him asking me to do the same thing over and over again and me saying it does not work - give me the file names, he asked me if my computer was turned on (troubleshooting the failure of "eventvwr" I guess). I said "are you serious - I have been following your instructions and executing your suggested commands for more than 1/2 hour now and you think the problem may be that my computer is not turned on?" I said "Please stop insulting me." He said "Screw you!" and hung up.

    Typical msft support call I guess<ggg>

    Tuesday, July 23, 2013 3:24 AM
  • I have just had same call today, 6 Sept 2013. I ran 'assoc', assuming it could do no harm. Before getting on to reading out the number, they asked me for £90 for fixing the problem with viruses, and I rang off.
    Friday, September 06, 2013 1:34 PM
  • I had the same call today 12 Sept 2013. Thought it might be a scam but as my email address had been hacked last year I decided to listen to what they had to say. After about 15 minutes trying to understand what he was saying (strong Indian accent) - I suggested that he write to me with all the instructions. He told me he couldn't do that so I asked to speak to his supervisor. Another Indian accented person came on the phone and went through the whole thing again.

    I told him I didn't have access to my PC so I needed him to send me the instructions via a letter. He said that would be too late as they only had 2 hours to fix the problem for me! That convinced me it was a scam and suggested he telephone me later in the day to continue the process. I managed to waste 30 minutes of their time and whatever it cost them to telephone me - I'm retired so the occassional "cold call" can be entertaining!

    Thanks to this website I am now sure it was a scam.

    Thursday, September 12, 2013 12:26 PM
  • Thank you so much for this post. I just got the same call, I quickly googled while I was on the phone. They did all the same things, and as above here they read the same number, which is the same number this other computer had as well. Seems they are similar and scammers. 


    Thanks guys

    Friday, October 04, 2013 8:44 PM
  • I got the same call today 1/16/14 from an Indian guy said he was with Homeland Security and my computer was hacked by someone in Mexico and wanted me to do the same thing cmd then assoc, didn't do it, he said it was not a scam, that someone may have hacked into my bank account, etc. etc., the call ID actually said Homeland Security 202-282-8000 said I was busy, I said what is my CNS number supposed to be and he read a long number similar to the ones referred to above in other people's comments.  I said why is Homeland Security hiring an Indian guy to notify me.  I hung up and then read this string of comments
    • Edited by pupfun Thursday, January 16, 2014 9:29 PM
    Thursday, January 16, 2014 9:28 PM