Antivirus can definitely be an issue...
You can archive error logs. You need to create a scheduled task in Kiwi to look for C:\program files (x86)\Syslogd\errorlog0.txt. The error log rotates at 1mb and keeps 1 older version. I have an 'Archive' task that checks for that file hourly and if found copies it to a new folder. I also have another 'Cleanup' task that deletes any files in the archive folder that are more than 30 days old.