Try this..
protected void btnSearch_Click(object sender, EventArgs e)
{
OleDbCommand cmd = new OleDbCommand();
cmd.Connection = conn;
cmd.CommandType = CommandType.Text;
cmd.CommandText = "SELECT column1, column2, column3 from table WHERE column1 LIKE '%' + @Param1 +'%' and column2 LIKE '%' + @Param2 +'%'";
cmd.Parameters.AddWithValue("@Param1", DropDownList7.SelectedItem.Text);
cmd.Parameters.AddWithValue("@Param2", DropDownList8.SelectedItem.Text);
conn.Open();
cmd.ExecuteNonQuery();
conn.Close();
}