Re: Not sure quite what happened
More than likely it was hacked 1.7 is not secure and there was a big campaign for everyone to upgrade to the more secure 1.8 release.
If you have good records for apache log you could always try and look there, otherwise Id advise installing the latest 1.9 from scratch.
Damian
http://free.tikihost.net