Directory Security

I’ve had someone malicious get onto my ftp site and upload a bunch of files. The problem is that whilst there he also removed all security from the directories. I can now no longer do anything to the directories and files, even as administrator. What can i do? Also some of the directories have been given names with a space on the end and one directory has no name at all! I’m very stuck, any ideas?