Do not contact the buyer in any way....as you suspect, it is an attempted scam.

I would ring ebay and let them know what has happened.

As you have already had contact with them you need to run all your virus scans and change all your passwords to ebay and paypal.

And be on the lookout for phishing emails over the next few months.