Data Recovery Case File · Cameras, Drones & Cards · Mystery Folders and .Trashes

Missing files, phantom folders, and ".trashes" where her data used to be: the strange symptoms decoded one by one — hidden housekeeping, corruption wearing a folder's face, and the files recovered beneath both

Her report was a small museum of odd symptoms, precisely observed. A microSD card: "some of the files are now missing, there are new folders and .trashes files. The adapter for the microSD was scratched, but the microSD card looks undamaged — however I can't access the files with a new adapter." Every oddity in that list is a clue, and this page reads them in turn: what ".trashes" actually is (nothing sinister — a Mac's hidden housekeeping made suddenly visible), what mysterious new folders usually are (corruption presenting itself as content), why files go "missing" without being gone, and where the scratched adapter fits the story. Her instinct that something structural has gone wrong is exactly right — and the structure is precisely what a recovery rebuilds, with her real files typically intact beneath the strangeness.

The decode: each strange symptom, explained

".Trashes" — hidden housekeeping made visible: the most alarming-looking symptom is the most benign. .Trashes is a hidden folder that Mac computers quietly create on every removable card and drive they touch — it's where macOS stages deleted files, part of a family of invisible housekeeping entries (alongside things like ".Spotlight" indexes) that Macs write everywhere and normally keep hidden from view. Its sudden visibility tells us two things: the card has been in a Mac at some point (routine), and — more diagnostically — the filesystem's normal presentation has broken down, because entries designed to stay hidden are now surfacing. .Trashes appearing isn't damage; it's the curtain falling, revealing backstage machinery that was always there.

The mysterious new folders — corruption wearing a folder's face: the "new folders" she doesn't recognise are, in a corrupted filesystem, almost never real folders anyone created. When directory structures are damaged, readers misinterpret the torn data — garbled entries parse as folders with strange names, fragments of the catalogue present themselves as content, and the volume fills with phantom items that are corruption rendered visible. New folders nobody made, appearing exactly when files go missing, are the classic signature of a directory table that's been damaged: the same broken bookkeeping that hides her real files also manifests the fake ones. They're two faces of one wound.

The missing files, and the scratched adapter: which brings the story together. Her files are "missing" because the directory entries pointing to them are damaged — the data remains written on the card, unlisted rather than erased, exactly the intact-territory-behind-a-broken-map pattern this volume keeps confirming. And the scratched adapter is the plausible culprit: as the suspect-adapter case elsewhere in this volume details, a physically compromised adapter makes intermittent contact, and a flicker mid-write tears the very directory structures now misbehaving. The new adapter can't help because the damage is already on the card — swapping the adapter fixes the path, not the torn map at the end of it. Her observation that the card "looks undamaged" is correct and consistent: the wound is logical, written into the structures, invisible from outside.

On the bench

The card was imaged write-blocked behind the DeepSpar USB Stabilizer 10Gb, and the archaeology ran on the copy. The damaged directory structures were analysed and reconstructed — the torn entries repaired until the real files re-listed, the phantom folders dissolving as the corruption that generated them was resolved, and the .trashes housekeeping set politely back out of the picture. Where any entries were damaged beyond rebuilding, OSForensics carved the files directly by signature from the image. The recovered set was verified by opening — her actual files, out from under the strangeness that had replaced them.

The outcome

Her files recovered from beneath the phantom folders and delivered verified, the corrupted directory rebuilt on the image. Free assessment, one fixed written figure including VAT; on cards and sticks where content has been deleted or overwritten, the figure is payable upfront. The strange symptoms, decoded for every owner who meets them: .trashes is a Mac's hidden housekeeping surfacing, folders nobody made are corruption wearing a folder's face, missing files are unlisted rather than erased — and a scratched adapter is exactly the kind of culprit that tears a card's map while leaving every photograph on the territory intact.

Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.