What's the default mode of your Writer Filter? Looks like either FBWF or UWF.
"Your computer is being serviced" is named "Service Mode" involved by Microsoft which is used to apply those windows update when WF is enabled.
Is there any Windows Update Service in your environment might triggered this during the SCCM imaging?