Did you also restore the database to an older version? Either when trying to clean the hack or when the site was moved between servers?
Or maybe the clean code versions that you have installed are a different version than the ones you were running before the hack.
The error message relates to a field that was introduced in one of the upgrade steps in the 2.3.3.x series if I remember right. It could be simply that your files and database are a little out of step.
If this is the case, you may be able to fix the problem simply by running the required update sql in phpMyAdmin:
alter table customers_info add password_reset_key char(40);
You probably also need to run
alter table customers_info add password_reset_date datetime;
If you have ended up with a mixture of files at different versions, though, you may find other errors.
- bevilleliam likes this