A good fake, make an executable that starts an image program and loads a picture. Meanwhile, it's an executable that can run virus.
The user would need to be fooled into thinking '.jpg.exe' is an image. This kind of virus cannot be shared trough facebook, as far as I'm aware.