I can add the following provisional observations.
1) I have experienced the problem on one of my machines three times since the 20th December. Twice on BBC1 and once on BBC 2 recordings. One of the programmes was this morning's "Shadow of a Doubt", as reported by EEPhil.
2) I have not experienced the problem on either of my other two machines. All three run CF and are fed by the same aerial.
3) All the recordings are SD. All were set using non-series recording, set to start automatically and use padding. All were manually moved into an Auto-decrypt folder after they had completely. I believe - but cannot be certain - that they did not exhibit the Enc icon until after the move. (Other recordings from the same channels and performed in the same way did not exhibit the problem.) The Enc icon is displayed both on the screen and on the Web-if.
4) Offloading the files via FTP and attempting to tun them via VLC suggests that they are still encrypted.
5) The problem may be connected with the copy-allowed field at X'03DC' in the hmt file, rather than the enc flag at X'028E'. The latter seems to be set as one would expect whereas, in the failing recordings, the copy-allowed field is set to X'00' rather than X'04'. However, the allowed-number-of-recordings' field at X'0431' is set to X'00'. If so, this suggests that, confusingly, the Enc icon and the hmt 'enc' flag are unrelated to each other.
6) Further corroboration might be provided by the fact that if the copy-allowed field in the failing recordings is manually changed to X'04', and the file moved back into the auto-decrypt folder, it then behaves normally. i.e. it is decrypted, the Enc icon disappears and VLC can now play the file.
7) This would appear to add some weight to the earlier speculations that something in the broadcast transmission streams for these particular programmes might be interacting with the DLNA indexing or auto-decrypt processing to set the copy-allowed and copy-count fields in such a way that the recordings become locked to any further processing. i.e a transient bug caused by interacting variables. Yuk!
I hope this helps.