VAC is 99.99% effective when banning people. It's so bad at "detecting" people because they want it to be effective and almost always correct. Valve mentioned that in the latest GDC conference, that you can check out online.
"It never hurts to keep looking for sunshine" - A. A. Milne