Then we are on it...
MSblaster probably changed original svchost.exe or some other file that svchost runs...

did you try with sfc.exe?