I have to agree with kevin , w/o code, no real idea, only generalizations.
If I were tracing this, I'd check the stored procedure calls from the vb app. Set up a logging mechanism to account for each call. Also set up a specific user on the database, if not already, and have the vb app the only process to use that login to make it easier to decipher db logs.
Post any code relating to where the stored proc is called and the proc itself and we will see what else can be determined.
hope that gives a starting point