He insists there is a setting in LW that permits anyone uploading any file to my pc without my knowledge or consent.

How does getting a virus cause me to end up with files I didn't download? Why would they want to upload files to my pc?