How to disable Java – Internet Explorer

Introduction

With vulnerabilities affecting Oracle’s Java plugin, users frequently ask how to disable or remove Java from their Windows computers. Considering the complexity of disabling (and then enabling) Java on Internet Explorer, Sophos recommends removing Java from your PC entirely to mitigate the risk. We have included the instructions here for those who wish to attempt to disable Java on Internet Explorer, while retaining its functionality on another browser.

Java 7 update 10 introduced a useful security control that allowed the web browser plugin to be disabled entirely. However, if you’re using an earlier version you can use the following instructions.

Windows removal instructions

Windows 7 and Vista users can go to Control Panel -> Programs. Older versions of Windows will be under Control Panel -> Add/Remove Programs.

Find Java in the Program list, highlight it and choose Uninstall. Windows will prompt you to confirm. Say yes.

You can confirm that Java is no longer installed by visiting http://java.com. Click “Do I have Java?” Click verify and confirm that it says “No working Java was detected on your system.”

Internet Explorer disable instructions

These steps were derived from advice given in CERT’s vulnerability note on CVE 2012-4681.

1. Open Internet Explorer.
2. Type ALT + T to activate the Tools menu and choose Manage Plugins. Choose “All items” from the Show drop-down menu. Disable “Java Plug-in –version number–.” It is safe to simply disable all of the items that begin with Java, but be sure to get this one. Close Internet Explorer.
   

3. Type WINDOWS + R and type regedit (approve UAC prompt if necessary). Browse to HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\{version}\UseJava2IExplorer and change (Default) to 0. 64-bit Windows users will need to change HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Plug-in\{version}\UseJava2IExplorer to 0.
   

4. Open Notepad (WINDOWS + R and type notepad) and paste the following code into it:
   Windows Registry Editor Version 5.00

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0001-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0001-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0002-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0002-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0003-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0003-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0004-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0004-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0005-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0005-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0006-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0006-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400

5. Click File -> Save As… and call it DisableJava.reg and put it on your Desktop.
6. Double-click the file on your Desktop and approve any UAC prompts.

At this point Java should be disabled.

Want to disable Java in other browsers?

Here are our instructions for disabling Java in other internet web browsers:

• How to disable Java in Firefox
• How to disable Java in Chrome
• How to disable Java in Safari
• How to disable Java in Opera