I seem to have the same issue, but only on all my windows desktops not on the windows server.
And it somehow magically goes away if I redirect standard output of logstash, which just makes no sense at all.
https://discuss.elastic.co/t/encoding-issue-depending-on-how-logstash-is-started/317136