Nasty Trojan/Virus

Whenever I open the Microsoft Edge browser, which has the MSN homepage set - and before I've even clicked on anything else - a nasty trojan/virus (Perfstringbackup.tmp) installs, then my firewall is disabled, and then a fake Windows update downloads more malware onto my PC. How is this all possible?