This same thing happened to me today as well, and since he seemed to know what my issue was (and I HAD reached out to QB support earlier in the day), I allowed him remote access. 
I’ve also changed my password and done malware scans on my computer. 
just wondering if anything bad happened to to your computer or company file after this incident. Please let me know!