well I didn’t. And they won’t get that far with me if they try calling back again.
If they were legit then they would have all necessary information at their disposal to issue a refund. A last resort would be a check issued in your name. If they call back tell them to just issue a refund check, that that will suffice with you.
No need for them to call back now. You already gave them access to your computer when you downloaded their malware.
You need to change all your passwords NOW, and scrub that malicious program from your machine. Get with your bank immediately, and cancel all your cards and banking passwords.
You've got no time to spare. Do it now.