Stick to verified SHA-1 hashes from the Internet Archive. Use Rufus to make your USB. Slipstream those USB 3.0 drivers. And most importantly, never expose a raw Windows 7 installation to the modern internet without a firewall and updated antivirus.