Memdump is an excellent program for grabbing the contents of memory and will essentially createa raw disk image, which other tools like encase and autopsy can read and do things like string searches on. The problem you would have is figuring out exactly where in memory things are...but something like strings can be suprisingly effective on a memdump image to grab things in memory...