180 mails per day is hardly a hijacked server - if the bad guys have their hands on it, it will send thousands per day. The qpsmtpd is used for inbound mails and qmail is used for outbound. You should check the qmail logs and see whether you can see something unusual there are from which user.