Thanks OldKettle.
Having interrogated AVG at length, I accept their assurance that they do not keep or track passwords.
Having searched Firefox I found there were several old and non-hazardous passwords stored, so I believe the pop-up must have come from them. Its a pity that I did not pay more...