Rufus and universal usb installer both broke windows 7 its unusable

Rufus and universal usb installer both broke windows 7 its unusable anymore there are too much leftovers and errors for normal operations.


First thing that's broke is that there is broken performance and registry hive, both problems pointing to the usb stick which is carrying Windows 7 sp1 retail usb created with the Rufus or Universal USB installer.


"Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards."


I also tried creating windows 7 installer via universal usb installer and I got the same results. Seems they both share the same changes. Few years ago this things were ok, I think they changed dramatically because uefi and windows 10 and they broke windows 7 in the process.

Some thing can be fixed with the script wmi.permissions.script.vbs but the main question is what can not be fixed, because I saw very strange behavior of windows and slowdowns.
Should we use Microsoft media creation tool now?



---------------

DETAIL -
15 user registry handles leaked from \Registry\User\S-1-5-21-3838845324-2666958239-4212638696-1001:
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001\Software\Microsoft\SystemCertificates\Root
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001\Software\Microsoft\SystemCertificates\My
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001\Software\Microsoft\SystemCertificates\CA
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001\Software\Microsoft\SystemCertificates\trust
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001\Software\Microsoft\SystemCertificates\TrustedPeople
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001\Software\Microsoft\SystemCertificates\Disallowed
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001\Software\Policies\Microsoft\SystemCertificates
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001\Software\Policies\Microsoft\SystemCertificates
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001\Software\Policies\Microsoft\SystemCertificates
Process 460 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3838845324-2666958239-4212638696-1001\Software\Policies\Microsoft\SystemCertificates
----------------------------------------------

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
------------------------------------------


WMI performance issue is somehow correctable but the question is, what else is broken and not so obvious like above two problems.


Now the question is from which version rufus and universal usb installer made some extreme changes making the rufus and universal usb installer to be erroneous.



Seems windows is now thinking that some parts of usb installer is a root for windows.
Device\HarddiskVolume5 is usb stick.

Looking at what you posted, there is something called sass.exe.

Take a look at this-

sass.exe - What is sass.exe?

You possibly could have that problem. Run malwarebytes on your system.

Snick said:

I doubt Rufus or Universal USB Installer broke your Windows 7!

lsass.exe not sass.exe

lsass.exe is a crucial system file, its name is often faked by malware. The lsass.exe file used by Windows is located in the directory %WINDIR%\System32 . If it is running from any other location, that lsass.exe is most likely a virus, spyware, trojan or worm.

OOPs! Thanks for the correction of the file name.

Hello!
I recommend that you use the Universal USB Installer. I had a problem installing Linux on my computer. Thanks to download the Universal Usb Installer at: https://universalusbinstaller.com/ I can do it fast and easy. My advice is that you do not compliques, in the web that I send you you can see the installation guide and the download. I hope my experience will help you.

Hi

All the errors are on Volume5 what is it???

1. Run diskpart.
2. Type list volume (to list all of the volumes)

post screenshot.


Roy