really its so easy to either inject into a already running windows process or service or bind your bot or code to a well known app as well as using other means of logging and sending information to the controller that simply running dir /a-d /b to find any userlog.dat files is not very likely to work except on a few specific bot's.
also do not rely on AV to be able to detect and get rid of every thing for you.