Not always. Had a corporate customer open an unassociated file using Notepad and it immediately associated everything with Notepad. Corporate was running current Symantec Endpoint Protection, and I ran the drive through 5 different AV engines without a hit.
It MAY not be , but I see at least one machine a week where it is...
All the best Brett