I also got a variant of this: JS:Agent-CDG[Trj]. The scan has not finished yet (did a full drive scan), but from what I gather it’s affecting Java (which I uninstalled a few months ago) and Adobe Reader, of which I possess the latest version. The file is located HOME/Library/Application Support/Java/Deployment/Cache/6.0. Need I worry now?
Edit: It seems it’s a false positive, according to virustotal. No other scanner finds something. My heart’s still racing though..