According to http://www.f-secure.com/weblog/archives/00002133.html , the "SL" path thing was exactly right!