there's a couple tools out there to test if a site is vulnerable. (http://possible.lv/tools/hb/)

Amusingly, since this is a problem with OpenSSL, Windows servers aren't affected by this unless they're running OpenSSL (under a local Apache install or something).