From my understanding but don't take this for fact!
I noticed 2 things that gets detected.
First is createthread.. Creating a thread isnt detected as is but if you create a inf loop within that thread, that gets detected.
What i did to get past that, i hooked a random function ingame.
Saying that, i went alittle further and created a managed dll with a timer.
Inject that and hooked the managed dll with the native one.
Since the managed dll isn't detected last time i checked and the hook location is dynamic, i think its safe for now.
Want me to dig out a copy?
The other issue i can't really explain. Think it has something todo with the build date.
My dll injector would patch the dll's first to get past that problem too.
Once the file was patched though, any dll injector could inject them.
Sometime today i'll see if i still have cf installed. i'll update and try this method to see if it still works.