You need to query the blacklists to see why you have been listed.
If you are sure that the server is secure, then it is most likely to be a workstation that is sending out spam. The quick and dirty way to find out which workstation is doing that is to simply block port 25 on your firewall for everything but Exchange. A workstation will quickly fill the logs on the firewall when it cannot connect.
If there are lots of messages in your queues then the server itself is being abused. Spammers lists are never very clean, so a clean queue quickly verifies that the problem is not with Exchange.
Simon.