Joehimself provided a lead here:
http://scammer.info/d/19856-tech-suppoat-numbers-5-26-19/2
A typical windows blocked scam popup.
I called it, let them connect, usual eventviewer/netstat nonsense. I agreed to pay 299 to have it fixed but wanted to pay by check.
I quickly photoshopped a fake check and printed it out. I had to make a photo of the check with my phone and they couldnt provide me an email address to send it to, instead they insisted I sent it to my own email so they could download it from my email account on my "infected" PC. Makes complete sense, so I did as told.
Next step was an electronic document, supposedly my proof of payment. In reality its an authorization form /electronic contract that may or may not give them legal rights to cash a check based on a photo. Here is the document they filled out and "signed" with my name (I refused to fill out any more forms after having given my data 3 or 4 times at that point):
https://secure.rightsignature.com/documents/fc1b4fc9-4590-4227-8509-80c3c9703809/details?token=153d65de-eb91-4e39-8e05-19ec00f0317b
As you can see, the contract is with Envie Info Solutions. Googling that I find a website of a tech support "'company" with an incomplete address and a phone number (be my guest):
http://www.envieinfosolution.info/
More interesting, after receiving the contract, you can check some details. Click the rightsignature link above, and click the arrow next to download and select Signature Certificate, or click the history link on the right. The audit trail at the bottom reveals the document was made by Capslock INC ([email protected]) with a US ATT IP address
Googling that I find this company, specialized in " SEO strategy, conversion copywriting, persuasive design, HubSpot and CMS development, and much more.":
https://www.partnerpoint.com/united-states/glendale-heights/microsoft-partner/capslock-inc
It really seems to be a Microsoft partner? They list a US address:
1046 Evergreen Cir
Glendale Heights, IL 60139
United States
Google maps has a great family picture, say hello to mr scammer and family?
https://www.google.com/maps/@41.8975283,-88.0752943,3a,60.5y,278.95h,87.56t/data=!3m6!1e1!3m4!1si1d5LGPAjqCzzWj0V9mx-g!2e0!7i16384!8i8192
I just finished editing the video, so I couldnt include your info, but here is my video on the call: