Worried about that virus, I am. Checked with this site: https://www.ssllabs.com/ssltest/index.html and Marriott.com is vulnerable. Of course this site updates the stats on a moment to moment basis but at this juncture seems to me that a password change is in order.
Just my thoughts and I am far from an IT geek!
Here is the SSL report
This server is not vulnerable to the Heartbleed attack. (Experimental)
This server supports SSL 2, which is obsolete and insecure. Grade set to F.
This server is vulnerable to MITM attacks because it supports insecure renegotiation. Grade set to F.
The server does not support Forward Secrecy with the reference browsers. MORE INFO »