My Server is participating in an Exploitabl​e chargen service attack

I have a small web server - Windows 2003. 

I was informed by some ISP that my server was participated in an Exploitabl​e chargen service attack.

I just wondering how my server was compromised.  How can I check which web application is compromised?

I am not good at Security. 

Thanks.