Please have a read of my article which should help you identify the issue, which is probably an authenticated attack:
http://www.experts-exchange.com/articles/Software/Server_Software/Email_Servers/Exchange/Why-are-my-outbound-queues-filling-up-with-mail-I-didn't-send.html
If you get stuck or have any questions, please just ask.
Alan