Ok this is crap. I've been playing around with Xolox 1.3 &1.4 Beta1 build461 and both share all my files in the default DOWNLOADS directory (in my case C:\Program Files\XoloX\downloads) even though I have no directories shared in my UPLOADS directory.

I detected it by seeing my firewall activity light going crazy and noticing an inbound connection - sure enough when I turned on 'Tools/My uploads visible' some was down loading without my knowledge.

This is the way it's suppose to work, I'm told. (If you click on the Files toolbar button you will see your download folder is shared.) This is a mechanism that forces people to share files. Many people download files from Gnutella, but they do not share any files for others to upload. The operation of the Xolox client is meant to discourage this behavior.

I would like to disable sharing of the download folder because I want to screen any files I download before I make them available for uploading. I want to make sure I'm not passing on any virus-infected files, corrupt images, mis-named files, etc. My only solution so far is to write a small program that automatically moves files out of the Xolox download folder and into a non-shared holding folder.

good point, but by not sharing files you've downloaded that is just promoting leeching. So xolox's intention is a good one for xolox users and in turn gnutella.

As far as virus's, as you may or may not know xolox will automatically scan every file downloaded using the virus scanner of your choice. ( see the howto in faq of main page).

Additionally 1.4 if you choose to show a hash verification warning, will allow you to delete a corrupt file before sharing it.

The hash verifications are rather high on multi-source downloads likely because of certain clients on gnutella that add data to a file and although files that fail the expected hash value still work, it is now a new file as far as sha1 is concerned.