Server Virus attack? port 1031,1038

Hi,
I have a strange problem. I have a windows 2000 server, running sql 2000. It is a test production server. Recently I was having a problem on my network that was flooding my firewall and no one was able to access the internet through the firewall because of all the traffic hitting it. I then took this server off the network and all returned to normal. I then realized that what was coming from this server was something trying to access port 1031 and 1038. I tried a virus scan and all appears to be fine. I really don't want to rebuild this server. Can anyone tell me what these ports are for? I do realize it is some kind of attack. But if there is a way to remove it from the server. I do have a live server w/the same configuration and have no problems. It would be appreicaited. Thank You