EmergingMalware

The Emerging Threats Malware ruleset is primarily Spyware related. It catches spyware URls, activity, User-Agents, etc.

It is available here:

http://www.emergingthreats.net/rules/bleeding-malware.rules

This ruleset relies heavily on the SpywareListeningPost for data and rules.