the EXE is detected. VAC picks up on the signature. He said he only used python. If thats the case the ban was either not even real, or like above, a mis-ban. If he used the EXE (at any time after it got detected, even if only once) then he just needs to lrn2read.