from the doc: 'virtually Identical except that it records the strokes into a file called c:winlogx. It is perfect for hacking especially in newer computers with windows 95 that do not contain a C:dos directory. The only thing that one would have to do is create a directory called c:win. History files are retained with the time and date encoded in the name, for example, 10301125.94W would be a history file created at 10:30 AM on Nov. 25, 1994. When first run, KEYLOG95.EXE will create the logx directory on C:, if it doesn't already exist. The user should take care to erase history files when no longer needed since these files will contain a record of ALL ascii keystrokes, even if the application intentionally does not echo them to the screen.'
keylog95.exe