logo elektroda
logo elektroda
X
logo elektroda
Advanced Search
logo elektroda

JSE Encryption Issue: Decrypt .JSE JScript Files & Recover .XLSX Excel Files

adsoft 2571 13
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
Report a violation of the law
Reply | New topic
  • #1 16917282
    adsoft
    Level 7  
    Hello,
    Unfortunately, the zipped rar file (jse file) was downloaded. After running, some excel files with the .xslx extension were encrypted and changed to JScript encoded script file (.jse). Has anyone had such a problem and managed to figure it out.
  • ADVERTISEMENT
  • #2 16917304
    Kolobos
    IT specialist  
    You can forget about files now.
  • ADVERTISEMENT
  • #3 16919222
    KodIT

    HDD Recovery specialist  
    A lot of people had such a problem and probably will have a lot more :)
    There is some chance of data recovery. First of all, this disk / computer cannot be used. You can send it in for analysis. Maybe something can be saved.
    Company Account:
    KodIT Odzyskiwanie Danych
    os. Stefana Batorego 49, Poznań, 60-687 | Tel.: 788-XXX-XXX (Show) | Company Website: https://kodit.pl
  • #4 16919235
    Kasek21
    Level 43  
    Nothing can save!
  • #5 16919249
    KodIT

    HDD Recovery specialist  
    Kasek21 wrote:
    Nothing can save!

    Where does this certainty come from?
    From time to time, we are flooded with orders of this type. Sometimes it is possible to recover everything, sometimes some. Sometimes, unfortunately, nothing.
    The degree of success depends on many factors.
    Company Account:
    KodIT Odzyskiwanie Danych
    os. Stefana Batorego 49, Poznań, 60-687 | Tel.: 788-XXX-XXX (Show) | Company Website: https://kodit.pl
  • #6 16919319
    Kasek21
    Level 43  
    I doubt that in this case; second, the service costs quite a lot - and you don't even know if it's worth sending for these files.
  • ADVERTISEMENT
  • #7 16919340
    KodIT

    HDD Recovery specialist  
    Kasek21 wrote:
    I doubt that in this case; second, the service costs quite a lot - and you don't even know if it's worth sending for these files.

    Why do you doubt? What are your reasons for this?
    How much does such a service cost according to you?

    Whether it's worth it or not, the author of the thread has to decide.
    Some data is invaluable.
    Company Account:
    KodIT Odzyskiwanie Danych
    os. Stefana Batorego 49, Poznań, 60-687 | Tel.: 788-XXX-XXX (Show) | Company Website: https://kodit.pl
  • #8 16919372
    Kasek21
    Level 43  
    KodIT wrote:
    Why do you doubt? What are your reasons for this?

    From experience.

    KodIT wrote:
    How much does such a service cost according to you?

    How many? If you propose an analysis and a company account?

    KodIT wrote:
    Whether it's worth it or not, the author of the thread has to decide.
    Some data is invaluable.

    So here the author of the topic must define himself.
  • ADVERTISEMENT
  • #9 16919397
    KodIT

    HDD Recovery specialist  
    Kasek21 wrote:
    From experience.

    We have different experiences. We did a lot of encrypted disks. The effects are different, but it is very rare that nothing will succeed.
    Therefore, such verdict "Nothing can save!" or "You can forget about the files now." without a diagnosis it makes no sense.

    Kasek21 wrote:
    KodIT wrote:
    How much does such a service cost according to you?

    How many? If you propose an analysis

    You see, you don't know how much such a service costs, and you already say a lot in advance.
    Each case is priced individually. The diagnosis is free of charge and without obligation.

    Kasek21 wrote:
    and this business account?

    What a business account? What's your complaint here?
    Company Account:
    KodIT Odzyskiwanie Danych
    os. Stefana Batorego 49, Poznań, 60-687 | Tel.: 788-XXX-XXX (Show) | Company Website: https://kodit.pl
  • #10 16919406
    Kasek21
    Level 43  
    Well, within what limits? Because probably not PLN 20 + shipment?
  • #12 16919426
    Kasek21
    Level 43  
    KodIT wrote:
    The cost starts from PLN 250.

    That's why I wrote that.

    ... and it all depends on:
    Kasek21 wrote:
    So here the author of the topic must define himself.
  • #13 16920849
    adsoft
    Level 7  
    There are not many files, let's say 20. Does any of you play with such topics, maybe some contact?
  • #14 16921049
    KodIT

    HDD Recovery specialist  
    If you are interested, you have our contact details in the footer.
    You will need the entire disk for analysis, not just files.
    Company Account:
    KodIT Odzyskiwanie Danych
    os. Stefana Batorego 49, Poznań, 60-687 | Tel.: 788-XXX-XXX (Show) | Company Website: https://kodit.pl
Reply | New topic
Report a violation of the law

Topic summary

✨ The discussion revolves around a user who encountered an issue where Excel files (.xlsx) were encrypted and converted into JScript encoded files (.jse) after downloading a zipped RAR file. Responses indicate that this is a common problem, with varying degrees of data recovery success. Some participants express skepticism about the possibility of recovery, while others suggest that sending the affected disk for professional analysis may yield results. The cost of recovery services is debated, with estimates starting from PLN 250. The importance of a thorough diagnosis before concluding the fate of the files is emphasized, as experiences with encrypted disks can differ significantly.
Generated by the language model.

FAQ

TL;DR: Cost to assess starts at PLN 250, and “The cost starts from PLN 250.” Recovery may be possible but case‑dependent. [Elektroda, KodIT, post #16919423]

Why it matters: If your .xlsx files became .jse after running malware, quick, informed actions can prevent permanent loss. This FAQ is for users asking how to fix .jse-encrypted Excel files and whether pro recovery is worth it.

Quick Facts

What happened when I ran a .jse and my .xlsx files became .jse?

You executed a JScript-encoded file that altered your Excel files. The result was encryption and renaming of .xlsx to .jse. This indicates a file-encrypting script or malware ran with your user permissions. The original poster reported exactly this behavior after launching a downloaded archive containing a .jse. Treat the system as compromised and avoid further writes to the affected disk. [Elektroda, adsoft, post #16917282]

Can these .xlsx files changed to .jse be recovered?

Recovery is possible in some cases. One expert reports varied outcomes: sometimes everything, sometimes only part, and sometimes nothing. Another member claimed total loss, but that view was challenged without a proper diagnosis. The practical takeaway: success depends on case specifics and prompt handling. “Such verdict ‘Nothing can save!’ without a diagnosis makes no sense.” [Elektroda, KodIT, post #16919397]

Should I keep using the computer after the encryption event?

No. Stop using the disk immediately. Further writes can overwrite recoverable data and reduce the chances of success. A responder advised halting use and submitting the disk for analysis to preserve recovery options. Power down, label the drive, and prepare it for professional evaluation if the data matters. [Elektroda, KodIT, post #16919222]

How much does professional recovery cost for this kind of case?

Expect entry pricing from PLN 250 for professional involvement. That is a starting point, not a final quote. Total cost depends on scope, affected media, and the required effort. Use this figure to gauge whether the value of your data justifies proceeding. Keep in mind that transparent providers will outline next steps after initial review. [Elektroda, KodIT, post #16919423]

Is the initial diagnosis free?

Yes. One specialist clarified that the diagnosis is free and without obligation. This lets you get a professional assessment before committing to paid work. Ask for a written summary of findings and a range for probable outcomes. “The diagnosis is free of charge and without obligation.” [Elektroda, KodIT, post #16919397]

Do labs need sample files or my entire disk?

They need the entire disk. Sending only a handful of encrypted files limits analysis and can block workable recovery paths. The expert explicitly requested the whole drive for assessment, not just the files. Package the disk carefully and include any context about when the event happened. [Elektroda, KodIT, post #16921049]

I only lost around 20 files. Is it still worth sending the disk?

Value is subjective. One user noted about 20 affected files, while experts stressed that only you can decide if recovery is worth it. If those files matter, proceed to diagnosis, which is free, then weigh the starting cost against data value. [Elektroda, adsoft, post #16920849]

What’s the realistic best and worst case here?

Best case: all encrypted items are restored. Middle case: partial recovery. Worst case: nothing is recoverable despite effort. Professionals emphasized that outcomes vary and sometimes nothing succeeds. Plan for all three scenarios before approving paid work. [Elektroda, KodIT, post #16919249]

What’s a .JSE file in this context?

It’s a JScript Encoded script file. In the reported incident, running such a file led to Excel documents being encrypted and renamed as .jse, signaling malicious activity. Treat any unexpected .jse from archives as dangerous. [Elektroda, adsoft, post #16917282]

How do I act fast without making things worse? (3-step first aid)

  1. Power off the affected PC to stop further writes.
  2. Remove the drive and label it; do not copy or open files.
  3. Arrange a no-obligation diagnosis with a recovery provider. These steps align with expert advice to stop use and send the disk for analysis. [Elektroda, KodIT, post #16919222]

Why do forum experts disagree on recoverability?

They bring different case histories. One expert rejects blanket “nothing can save” claims without diagnosis, noting many encrypted disks where at least some data returned. Variation in methods, timing, and damage explains the debate. Professional assessment replaces speculation. [Elektroda, KodIT, post #16919397]

Will sending just the encrypted files speed things up?

No. Providers asked for the whole disk for proper triage and tooling. Single-file samples rarely reveal the full damage or recovery path. Ship the entire affected drive to maximize the chance of a definitive result. [Elektroda, KodIT, post #16921049]

What’s a simple budget signal I can use before I commit?

Use the stated starting figure: PLN 250 for professional involvement. Ask whether this covers diagnosis only or includes an initial recovery attempt. Request a written scope after the free assessment so you can approve or decline. [Elektroda, KodIT, post #16919423]

How do I contact a specialist from the thread?

The professional who replied said their contact details are in the forum footer. Reach out there and mention your .jse/.xlsx incident. Be ready to provide the whole disk and a timeline of events. [Elektroda, KodIT, post #16921049]
Generated by the language model.
ADVERTISEMENT