@tinfolihat: "I recently helped remove a Windows Police Pro rogue from a computer.
Malwarebytes dealt with it and the owner paid for the product 
(Malwarebytes).
However, the Scheduled tasks no longer function.  This appears to be
dependent upon the Event Log service running.  Attempting to start these
gives a "interface unknown" error 1717 and event log error 126.  These
are symptoms found and instructions I have discovered offer no help.
The Hijack log is unremarkable and GMER shows no suspicious activity.
One Googled result shows file damage wherein critical files were named
from *.DLL to *.DLL_ (appended underscore) causing them to appear as
compressed, or so suggested by a similar problem.
Does a "Repair Installation" of Windows seem worth a try before a 
complete wipe and re-install?
Thanks for any suggestions.
T.H"
    @DLipmannospam: "From: "T.H" <email_address>
| I recently helped remove a Windows Police Pro rogue from a computer.
| Malwarebytes dealt with it and the owner paid for the product
| (Malwarebytes).
| However, the Scheduled tasks no longer function.  This appears to be
| dependent upon the Event Log service running.  Attempting to start these
| gives a "interface unknown" error 1717 and event log error 126.  These
| are symptoms found and instructions I have discovered offer no help.
| The Hijack log is unremarkable and GMER shows no suspicious activity.
| One Googled result shows file damage wherein critical files were named
| from *.DLL to *.DLL_ (appended underscore) causing them to appear as
| compressed, or so suggested by a similar problem.
| Does a "Repair Installation" of Windows seem worth a try before a
| complete wipe and re-install?
| Thanks for any suggestions.
| T.H
I presume then eventlog.dll was affected.
See if you can restore;  %windir%\servicepackfiles\i386\eventlog.dll
to
%windir%\system32
Dave
<url>
Multi-AV - <url> "
    @tinfolihat: "<quote>
I just visited the user and eventlog.dll was not damaged - it was gone! 
  Gone from the %windir%\system32 location.
Restoring it worked a treat!
Thanks and Merry Christmas, David.
Tinfoil (wish I could afford a gold foil hat...)"
    @DLipmannospam: "From: "T.H" <email_address>
<quote>
| I just visited the user and eventlog.dll was not damaged - it was gone!
|   Gone from the %windir%\system32 location.
| Restoring it worked a treat!
| Thanks and Merry Christmas, David.
| Tinfoil (wish I could afford a gold foil hat...)
Thanx for the update and Happy Holidays.
Dave
<url>
Multi-AV - <url> "
{'source': 'USENET', 'other_information': '{"reply_count": 3, "forum_name": "alt.privacy.spyware.20140710.mbox"}', 'file': 'data/output/usenet-alt.privacy.parquet'}