shaunm, After the "?" in that URL, your campaign is appending TWO parameters, connected by a "&" symbol which means what it does conventionally - "and". What your program uses those parameters for is something your tech and marketing people can tell you, but we can't.
If those parameter variations make no difference to what content your site displays, then you do need to keep them out of Google search results. For example, if http://example.com/demo/index.aspx serves the same content as http://example.com/demo/index.aspx?Program=435&c=60150000000ALPK - then the canonical URL is http://example.com/demo/index.aspx and that's the only one you want in the search results.
If they do make a difference to the content, then you have some things to work out with your tech and marketing people. Also, from that example, it looks like you are letting Google index a development server. Usually, just in itself, that is a recipe for disaster.