If you don't check the option drill down from parent collection, your filters apply to all your computers. That's why computers without java get marked with your checking java version filter.
Since their is no nesting inside collections filters, you would need to have a top level dynamic collection checking which computers have the software installed and then have another dynamic collection with the option to drill down from parent collection that checks for your specified version of the software.