Virus doing spam port scan on 1433

No, I'm not running any of those. I think this might be a new virus

Here are some tools to run if you havent already
Anti-Spyware/Adware

Ad-Aware 6
http://download.com.com/Ad-aware/3000-8022-10214379.html?tag=lst-0-1

Spybot Search & Destroy 1.3
http://download.com.com/3000-8022-10289035.html?tag=lst-0-1

Spy Sweeper 2.6 (free trial)
http://www.webroot.com/wb/products/spysweeper/index.php

Hijack This
http://download.com.com/3000-8022-10227352.html?tag=lst-0-3

Web Shredder (Removes all Cool Web Search variants)
http://www.spywareinfo.com/~merijn/cwschronicles.html#cwshredder


Online Anti-Virus

Computer Associates Online AV
http://www3.ca.com/virusinfo/virusscan.aspx

Symantec (Norton AV)
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym

McAfee Free Scan
http://us.mcafee.com/root/mfs/default.asp

McAfee AVERT Stinger
http://vil.nai.com/vil/stinger/

Trend Micro Housecall
http://housecall.antivirus.com/housecall/start_corp.asp

Panda ActiveScan
http://www.pandasoftware.com/activescan/

Kapersky Online AV
http://www.kaspersky.com/remoteviruschk.html

I did complete check with Norton Spybot and Adaware all with latest updates under safe mode. Nothing came up.

http://grc.com/port_1433.htm

Gives more info on SQL's port 1433 usage.

If you are part of a company, then any employee could have downloaded it from the web. There's some really nasty network-spreading viruses around, a lot of which hijack connections to send out messages or weaken the system. I recently got a virus which started off on a Windows XP system and managed to jump it's way through our wireless network untill all of the computers (asbout 20 or so) were infected. I had to totally disconnect us from the internet to stop hackers using the open ports the virus created to destroy our network. It took me weeks to fix, because it bound itself to other files. In the end I had to back up any documents we needed and re-format everything.

If the virus is running as "sysdevice.exe" try doing the following:
1) Start -> Run, type "regedit" (no quotes)
2) Navigate to "HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Run"
3) Look for any values which contain "sysdevice.exe" in their data.
4) If you find any, go to step 5, otherwise, check "HKEY_CURRENT_USER/SOFTWARE/Microsoft/Windows/CurrentVersion/Run". If you still get nothing, skip the rest of this and read about MSConfig at the bottom of this answer.
5) Use Ctrl-Alt-Del to close the process, if it refuses to close, go to Start -> Run and type in "cmd", then type "taskkill /IM sysdevice.exe /F" (no quotes)
6) Find and delete the EXE file in explorer, the directory shown in the registry key you found. If it's not there, it may be hidden and you might not be showing hidden files. To show hidden files, click Tools -> Folder Options, go to the "View" tab, and make sure that "Show hidden files and folders" is selected.
7) Delete the registry value that attempts to run the virus at login by highlighting it (left-click) and pressing the "Delete" or "Del" key. You can also right click it and select "Delete".
8) Restart the computer. The virus should be gone.

If you couldn't find any bootup values, use MSConfig. To do this, click Start -> Run, and type "msconfig" (no quotes). Check for anything called sysdevice in the services tab and disable it. Also, look in the startup tab for any bootup values.

Hope it's useful!

Oh yeah, I forgot to say this...

MSConfig will only delete the registry value, the file will still be there. You need to delete the file as well. I would suggest closing the virus process before you use MSConfig.

Another good idea is to Google the process name.
I just did it and it appears not to be a virus in the first place. It's a driver controller for OpenVMS that handles things like mailboxes and null drivers.

It goes to show that Google really is useful, and it should be the first place to check.

Oh well, what I said above is perfectly useful for removing viruses, if you want to stop the program, follow the anwer above but don't delete the file.