What solved the problem was to delete the
HKLM\System\CurrentControlSet\services\eventlog\Parameters\
key.
As I stated earlier, I've seen this error with Process Monitor, but chose to put there some key - and that was my mistake. I should've delete this key instead.