Days later, Elias discovered the truth: "mdivwctldll" wasn't a broken system file. It was a DLL hijacking payload