That VAC Bypass is rather crude... but I guess it works.
When my friends and I wrote some cheats in the past we used to hook VAC so that when it wanted to run we'd unload our hooks/cheats and let it complete scanning as normal, then once VAC was completed we'd re-hook and re-load our library/hooks.
This also allowed us to iterate on development by having live-reload of the .dll on disk by unhooking, reloading dll, and rehooking.
This was back in the days of Counter Strike: Source, when it first came out.
The day it was first released on macOS was fun too... Valve forgot to strip debug symbols on their macOS, so we were able to dump all of the debug symbols and get a much better idea on what to hook/look for and what the various structures were used for!
At least in the past, admins on servers had the option to intervene and ban people (although they could be bypassed as well). Nowadays games opt for having entirely managing servers, sadly.
When my friends and I wrote some cheats in the past we used to hook VAC so that when it wanted to run we'd unload our hooks/cheats and let it complete scanning as normal, then once VAC was completed we'd re-hook and re-load our library/hooks.
This also allowed us to iterate on development by having live-reload of the .dll on disk by unhooking, reloading dll, and rehooking.
This was back in the days of Counter Strike: Source, when it first came out.
The day it was first released on macOS was fun too... Valve forgot to strip debug symbols on their macOS, so we were able to dump all of the debug symbols and get a much better idea on what to hook/look for and what the various structures were used for!