What will the following URL produce in an unpatched IIS Web Server?

http://www.thetargetsite.com/scripts/..% co%af../..%co%af../windows/system32/cmd.exe?/c+dir+c:

A.
Directory listing of C: drive on the web server

B.
Insert a Trojan horse into the C: drive of the web server

C.
Execute a buffer flow in the C: drive of the web server

D.
Directory listing of the C:windowssystem32 folder on the web server