Workaround Update
Adding the =*.zzz to Norton Systemworks exclusions is no longer working for me either. I must have neglected something when I was testing this workaround. Sorry for the confusion.
Turning off the emptying of the recycle bin in CCleaner does work. This allows secure deletion to work for the other files.
Another option is to disable Norton Protection and just use the regular recycle bin.
For secure deletion, If you both disable Norton Protection and also turn off emptying of the recyle bin in CCleaner, you could then use a more aggressive overwrite on just those files in the recycle bin, such as the one in Eraser. Using a more aggressive overwrite is also possible in CCleaner of course, but may be time consuming if it is used to overwrite things like the hotfix installers etc.