If the admin portal got infected with a virus or malware what is the impact to current instance and other client instances?

Admin portal is independent and thus same as above applies. It would be limited to the database for the unique instance IF something were to become infected.