VAC bypass and VAC protection are two different things.
However, you have to think about how VAC works (checking for checksum of hacks, hack window name, etc) and then make counter attack (different checksum everytime, random name, etc). This should be enough for start. For more complicated protections - just think how can VAC detect your tool and recognize difference between your hack and chrome exe (for example)