@kepamuk @o4kapuk jo apparently the last picture: http://dl4.joxi.net/drive/2020/01/31/0011/2711/772759/59/69625b05ca.jpg Is contaminated with some malicious software and got flagged by our GData Enterprise Suite... So it could be that the host server or your private machine is compromised pls check that. Update: Or GData is just beeing GData since I double checked it and only 2 out of 73 scanner flagged it. Man that software is annoying, but better than nothing. At least it is doing it's job... sorta.