While this doesnt count as hiding a virus inside an image, it will give you an idea of what can be done and what someone with a lot of time and know how could accomplish if they wanted to... -
Embed files in Images . But I think adding harmful code to something like this would require the GDI issue to not be patched on your PC. Its always better to be safe than sorry though. 8-)