Decrpyt internet explorer passwords stored in registry

Regarding the above,

I have the EDS module installed. When i run it, it says "main class not found". Need urgent help

The UK Guidance phone number is 01753 552252. They'll put you though to support.

Have you tried the software mypassview? it automatically decrypts the password for you.

reinstall Encase to a new folder.

Sounds like the Enscripts and libs have become messed up.

I believe Registry Viewer by AccessData will work too.

Have you tried the software mypassview? it automatically decrypts the password for you.

Is there any software which decrypts IE passwords not for logged user but for another user of a system? As far as I understand, IE passwords are encrypted with some data specific to a logged user so it might be not possible to decrypt them in case you are logged under another one.

To add to what Belkasoft has said - you can also look at booting the suspect machine E01 image,(reset the user account logon password) and then try dcrypting the cached IE password using Nirsoft or other similar tools.
Take a look at http//www.virtualforensiccomputing.com/boot-encase-image-vfc.php and also Liveview. This may be easier to trying to decrypt the passwords from the registry.

If it's passwords stored in Intelliforms data you're looking for, Access Data's PRTK can sometimes decrypt these, link here. You'll need to give PRTK a number of things though. You need to know the user's Windows password. As the Intelliforms data is also encrpyted with the URL, you also need to supply PRTK with history records. I've had mixed results with PRTK.

There is IE PassView
http//www.nirsoft.net/utils/internet_explorer_password.html