Custom loaded modules enumeration

```
Currenty, loaded modules enumeration is done via EnumProcessModules. This 
function iterates over the linked list 
ntdll!_LDR_DATA_TABLE_ENTRY.InMemoryOrderLinks.

If a module was loaded with a "custom" loader or removed from the list (e.g. by 
malware) it won't be seen.
```

Original issue reported on code.google.com by `frishr...@gmail.com` on 11 Apr 2012 at 7:29
