If disabling shares has stopped it then that would explain why there was nothing apparent on your system. No need for AVP now.

Although this may indicate that the computer you were sharing with was infected