How are you defining the page alias? Also, what is set as the forbidden URL character replacement?
Kentico is not adding the * just so, I have never seen this before. My guess is that it is set as forbidden URL character replacement instead of the default dash (-). Or, there is some custom request handler or IIS URL Rewriting rule.