A month after 'malicious' cyberattack, a small Colorado utility still doesn't have all systems back online