Thanks for the help Charlie - I had used your grep uid /etc/passwd instructions from another post/different thread.
It helped immensely.
You can see my whole resolution process in comment #13.
We are now 5 days spam free, queue functioning correctly with 0 messages stuck.
I believe it was out of date wordpress that was compromised.