Does your VB process use a single login to the database or pass the user's login credentials through to the database? You may need to capture this information inside the VB as part of the transactional processes, or require adding auditing to the VB application.

If the process is web-based, is there a web.config file that authenticates to the database? If so, then VB owns the problem, not the database.