Can you just go ahead and post your my.cnf? Blank out any passwords that might be in there. probably aren't though.
Then go into /var/www/vhosts/mydomain.org/httpdocs/flash/car/
put in an .htaccess file that contains this line
Options -Indexes
(or is it +Indexes
) try both, lol.